12:04 AM
[ SmokeDetector | MS ] Potentially bad keyword in body (1): Transformar un menu a responsive, problema con el logo by Sebastián on
es.stackoverflow.com
halflife:2019-07-22 00:07:40,532:188327: Extracted URL
https://mega.nz/#!s14AWCSb!xHtPifcEcR5MgnNvUNgGlaeapEK9GDLCJEp4hw9cZMM
halflife:2019-07-22 00:07:40,532:188327: mega.nz is watched
halflife:2019-07-22 00:07:40,532:188327: URL tail #!s14awcsb!xhtpifcecr5mgnnvungglaeapek9gdlcjep4hw9czmm is not blacklisted or watched
halflife:2019-07-22 00:07:40,532:188327: mega.nz: 0/10 over 6 days, 10:40:16
halflife:2019-07-22 00:07:40,532:188327: URL tail #!s14awcsb!xhtpifcecr5mgnnvungglaeapek9gdlcjep4hw9czmm is not blacklisted or watched
halflife:2019-07-22 00:07:40,532:188327: mega.nz: 0/10 over 6 days, 10:40:16
halflife:2019-07-22 00:07:40,532:188327: i.stack.imgur.com: ns ['i.stack.imgur.com.cdn.cloudflare.net.']
halflife:2019-07-22 00:07:40,532:188327: i.stack.imgur.com: ip 104.16.31.34 ()
halflife:2019-07-22 00:07:40,532:188327: i.stack.imgur.com: ip 104.16.26.34 ()
halflife:2019-07-22 00:07:40,532:188327: i.stack.imgur.com: ip 104.16.28.34 ()
halflife:2019-07-22 00:07:40,532:188327: i.stack.imgur.com: ip 104.16.30.34 ()
halflife:2019-07-22 00:07:40,533:188327: i.stack.imgur.com: ip 104.16.29.34 ()
halflife:2019-07-22 00:07:40,532:188327: i.stack.imgur.com: ip 104.16.31.34 ()
halflife:2019-07-22 00:07:40,532:188327: i.stack.imgur.com: ip 104.16.26.34 ()
halflife:2019-07-22 00:07:40,532:188327: i.stack.imgur.com: ip 104.16.28.34 ()
halflife:2019-07-22 00:07:40,532:188327: i.stack.imgur.com: ip 104.16.30.34 ()
halflife:2019-07-22 00:07:40,533:188327: i.stack.imgur.com: ip 104.16.29.34 ()
halflife:2019-07-22 00:07:40,533:188327: i.stack.imgur.com: ip 104.16.24.34 ()
halflife:2019-07-22 00:07:40,533:188327: i.stack.imgur.com: ip 104.16.25.34 ()
halflife:2019-07-22 00:07:40,533:188327: i.stack.imgur.com: ip 104.16.27.34 ()
halflife:2019-07-22 00:07:40,533:188327: i.stack.imgur.com: ip i.stack.imgur.com.cdn.cloudflare.net. ()
halflife:2019-07-22 00:07:40,533:188327: i.stack.imgur.com: ip 104.16.0.35 ()
halflife:2019-07-22 00:07:40,612:188327: i.stack.imgur.com: ip 104.16.2.35 ()
halflife:2019-07-22 00:07:40,533:188327: i.stack.imgur.com: ip 104.16.25.34 ()
halflife:2019-07-22 00:07:40,533:188327: i.stack.imgur.com: ip 104.16.27.34 ()
halflife:2019-07-22 00:07:40,533:188327: i.stack.imgur.com: ip i.stack.imgur.com.cdn.cloudflare.net. ()
halflife:2019-07-22 00:07:40,533:188327: i.stack.imgur.com: ip 104.16.0.35 ()
halflife:2019-07-22 00:07:40,612:188327: i.stack.imgur.com: ip 104.16.2.35 ()
[ SmokeDetector | MS ] Potentially bad keyword in body (1): My production Ubuntu server was breached through Redis and I found this script. Is it a decoy? by L1ght5p33D on
security.SE
[ SmokeDetector | MS ] Potentially bad keyword in body (1): suitecrm in ubuntu18 ec2 instance port 80 error by Rateb on
askubuntu.com
12:17 AM
halflife:2019-07-22 00:17:57,454:188329: Extracted URL
https://websiteforstudents.com/install-suitecrm-on-ubuntu-16-04-18-04-with-apache2-mariadb-and-php-7-2/
halflife:2019-07-22 00:17:57,454:188329: websiteforstudents.com is watched
halflife:2019-07-22 00:17:57,454:188329: websiteforstudents.com: ns ['ns-cloud-e3.googledomains.com.', 'ns-cloud-e4.googledomains.com.', 'ns-cloud-e1.googledomains.com.', 'ns-cloud-e2.googledomains.com.']
halflife:2019-07-22 00:17:57,454:188329: websiteforstudents.com: ip 35.236.15.231 (231.15.236.35.bc.googleusercontent.com.)
halflife:2019-07-22 00:17:57,454:188329: websiteforstudents.com: ns ['ns-cloud-e3.googledomains.com.', 'ns-cloud-e4.googledomains.com.', 'ns-cloud-e1.googledomains.com.', 'ns-cloud-e2.googledomains.com.']
halflife:2019-07-22 00:17:57,454:188329: websiteforstudents.com: ip 35.236.15.231 (231.15.236.35.bc.googleusercontent.com.)
halflife:2019-07-22 00:17:57,454:188329: websiteforstudents.com: ip 35.236.15.231 AS 15169 (GOOGLE - Google LLC, US/US)
halflife:2019-07-22 00:17:57,454:188329: URL tail install-suitecrm-on-ubuntu-16-04-18-04-with-apache2-mariadb-and-php-7-2 is not blacklisted or watched
halflife:2019-07-22 00:17:57,454:188329: websiteforstudents.com: 0/10 over 94 days, 6:38:19
halflife:2019-07-22 00:17:57,454:188329: URL tail install-suitecrm-on-ubuntu-16-04-18-04-with-apache2-mariadb-and-php-7-2 is not blacklisted or watched
halflife:2019-07-22 00:17:57,454:188329: websiteforstudents.com: 0/10 over 94 days, 6:38:19
12:39 AM
halflife:2019-07-22 00:39:07,035:Halflife 230b968 running on 1e40f29883f5 started 2019-07-22 00:39:07.035379 UTC
halflife:2019-07-22 00:39:14,419:Halflife 230b968 running on 1e40f29883f5 started 2019-07-22 00:39:14.418967 UTC
12:56 AM
halflife:2019-07-22 00:56:44,175:188330: Extracted URL
https://www.fangraphs.com/leaders/splits-leaderboards?splitArr=8,131&splitArrPitch=&position=B&autoPt=false&splitTeams=false&statType=player&statgroup=2&startDate=2014-03-01&endDate=2019-11-01&players=&filter=AB%7Cgt%7C5&sort=16,1&pageitems=10000000000000&pagenum=0
halflife:2019-07-22 00:56:44,175:188330: fangraphs.com is not blacklisted or watched
halflife:2019-07-22 00:56:44,175:188330: fangraphs.com: ns ['tori.ns.cloudflare.com.', 'joel.ns.cloudflare.com.']
halflife:2019-07-22 00:56:44,175:188330: fangraphs.com: ip 67.227.165.91 (host01.fangraphs.com.)
halflife:2019-07-22 00:56:44,175:188330: fangraphs.com: ip 67.227.165.91 AS 32244 (LIQUIDWEB - Liquid Web, L.L.C, US/US)
halflife:2019-07-22 00:56:44,176:188330: fangraphs.com: 0/2 over 53 days, 6:33:04
halflife:2019-07-22 00:56:44,175:188330: fangraphs.com: ns ['tori.ns.cloudflare.com.', 'joel.ns.cloudflare.com.']
halflife:2019-07-22 00:56:44,175:188330: fangraphs.com: ip 67.227.165.91 (host01.fangraphs.com.)
halflife:2019-07-22 00:56:44,175:188330: fangraphs.com: ip 67.227.165.91 AS 32244 (LIQUIDWEB - Liquid Web, L.L.C, US/US)
halflife:2019-07-22 00:56:44,176:188330: fangraphs.com: 0/2 over 53 days, 6:33:04
1 hour later…
2:10 AM
halflife:2019-07-22 02:10:02,576:188331: Check post wordpress.stackexchange.com/questions/343347 (1)
[ SmokeDetector | MS ] Potentially bad asn for hostname in body (1): Dropdown contents hidden behind content by Dazza on
wordpress.SE
halflife:2019-07-22 02:10:07,366:188331: courses.darrylsyms.com is not blacklisted or watched
halflife:2019-07-22 02:10:07,366:188331: courses.darrylsyms.com: ns ['']
halflife:2019-07-22 02:10:07,366:188331: courses.darrylsyms.com: ip 77.104.149.74 (ip-77-104-149-74.siteground.com.)
halflife:2019-07-22 02:10:07,366:188331: courses.darrylsyms.com: ip 77.104.149.74 AS 36351 (SOFTLAYER - SoftLayer Technologies Inc., US/US)
halflife:2019-07-22 02:10:07,366:188331: courses.darrylsyms.com: ns ['']
halflife:2019-07-22 02:10:07,366:188331: courses.darrylsyms.com: ip 77.104.149.74 (ip-77-104-149-74.siteground.com.)
halflife:2019-07-22 02:10:07,366:188331: courses.darrylsyms.com: ip 77.104.149.74 AS 36351 (SOFTLAYER - SoftLayer Technologies Inc., US/US)
halflife:2019-07-22 02:10:07,366:188331: URL tail members is not blacklisted or watched
halflife:2019-07-22 02:10:07,366:188331: courses.darrylsyms.com: first hit
halflife:2019-07-22 02:10:07,366:188331: courses.darrylsyms.com: first hit
halflife:2019-07-22 02:10:07,366:188331: imgur.com: ns ['dns2.p03.nsone.net.', 'dns3.p03.nsone.net.', 'dns4.p03.nsone.net.', 'dns1.p03.nsone.net.']
halflife:2019-07-22 02:10:07,367:188331: imgur.com: ip 151.101.60.193 ()
halflife:2019-07-22 02:10:07,367:188331: imgur.com: ip 151.101.60.193 AS 54113 (FASTLY - Fastly, US/US)
halflife:2019-07-22 02:10:07,367:188331: imgur.com: ip 151.101.60.193 ()
halflife:2019-07-22 02:10:07,367:188331: imgur.com: ip 151.101.60.193 AS 54113 (FASTLY - Fastly, US/US)
2:27 AM
halflife:2019-07-22 02:27:28,788:188332: computers.remolet.ru is not blacklisted or watched
halflife:2019-07-22 02:27:28,788:188332: computers.remolet.ru: ns ['']
halflife:2019-07-22 02:27:28,788:188332: computers.remolet.ru: ip 188.93.211.135 (entegrato.com.)
halflife:2019-07-22 02:27:28,788:188332: computers.remolet.ru: ip 188.93.211.135 AS 197695 (AS-REG, RU/RU)
halflife:2019-07-22 02:27:28,788:188332: computers.remolet.ru: first hit
halflife:2019-07-22 02:27:28,788:188332: computers.remolet.ru: ns ['']
halflife:2019-07-22 02:27:28,788:188332: computers.remolet.ru: ip 188.93.211.135 (entegrato.com.)
halflife:2019-07-22 02:27:28,788:188332: computers.remolet.ru: ip 188.93.211.135 AS 197695 (AS-REG, RU/RU)
halflife:2019-07-22 02:27:28,788:188332: computers.remolet.ru: first hit
2:57 AM
[ SmokeDetector ] SmokeDetector started in standby mode at rev
d63a510
(Makyen: Remove Socket Science -autopull) (running on teward/Solar Flare)
[ SmokeDetector | MS ] Potentially bad keyword in answer (1): Starting Apache Httpd at Boot time with Zero intervention, CentOS and authbind by Muhammad Waqar on
unix.SE
halflife:2019-07-22 03:05:33,520:188333: wuschools.com is not blacklisted or watched
halflife:2019-07-22 03:05:33,520:188333: wuschools.com: ns ['ns38.urlnameserver.com.', 'ns37.urlnameserver.com.']
halflife:2019-07-22 03:05:33,520:188333: wuschools.com: ip 99.198.127.106 (crystal.urlnameserver.com.)
halflife:2019-07-22 03:05:33,520:188333: wuschools.com: ip 99.198.127.106 AS 32475 (SINGLEHOP-LLC - SingleHop LLC, US/US)
halflife:2019-07-22 03:05:33,520:188333: wuschools.com: ns ['ns38.urlnameserver.com.', 'ns37.urlnameserver.com.']
halflife:2019-07-22 03:05:33,520:188333: wuschools.com: ip 99.198.127.106 (crystal.urlnameserver.com.)
halflife:2019-07-22 03:05:33,520:188333: wuschools.com: ip 99.198.127.106 AS 32475 (SINGLEHOP-LLC - SingleHop LLC, US/US)
halflife:2019-07-22 03:05:33,520:188333: URL tail post.php?post_id=77 is not blacklisted or watched
halflife:2019-07-22 03:05:33,520:188333: wuschools.com: first hit
halflife:2019-07-22 03:05:33,520:188333: wuschools.com: first hit
halflife:2019-07-22 03:10:07,228:188334: litextension.com is blacklisted
halflife:2019-07-22 03:10:07,228:188334: litextension.com: ns ['ns1.zonedns.vn.', 'ns2.zonedns.vn.', 'ns3.zonedns.vn.', 'ns4.zonedns.vn.']
halflife:2019-07-22 03:10:07,228:188334: litextension.com: ip 72.14.186.31 (li52-31.members.linode.com.)
halflife:2019-07-22 03:10:07,228:188334: litextension.com: ip 72.14.186.31 AS 63949 (LINODE-AP Linode, LLC, US/US)
halflife:2019-07-22 03:10:07,228:188334: litextension.com: ns ['ns1.zonedns.vn.', 'ns2.zonedns.vn.', 'ns3.zonedns.vn.', 'ns4.zonedns.vn.']
halflife:2019-07-22 03:10:07,228:188334: litextension.com: ip 72.14.186.31 (li52-31.members.linode.com.)
halflife:2019-07-22 03:10:07,228:188334: litextension.com: ip 72.14.186.31 AS 63949 (LINODE-AP Linode, LLC, US/US)
3:14 AM
[ SmokeDetector | MS ] Potentially bad keyword in answer (1): How to force emerge to install a newer version of a package? by Muhammad Waqar on
unix.SE
[ SmokeDetector | MS ] Email in answer (76): Ethiopian Airlines tickets seem to always have the same price regardless of the proximity of the date? by Tesfaye on
travel.SE
[ SmokeDetector | MS ] Potentially bad keyword in body (1): Connect existing FTTP instalation to router with SFP? by Dusan on
superuser.com
halflife:2019-07-22 03:19:43,029:188337: forum.mikrotik.com is not blacklisted or watched
halflife:2019-07-22 03:19:43,029:188337: forum.mikrotik.com: ns ['']
halflife:2019-07-22 03:19:43,029:188337: forum.mikrotik.com: ip 159.148.147.205 ()
halflife:2019-07-22 03:19:43,029:188337: forum.mikrotik.com: ip 159.148.147.205 AS 51894 (AS_MIKROTIKLS, LV/LV)
halflife:2019-07-22 03:19:43,029:188337: URL tail viewtopic.php?t=140767 is not blacklisted or watched
halflife:2019-07-22 03:19:43,029:188337: forum.mikrotik.com: ns ['']
halflife:2019-07-22 03:19:43,029:188337: forum.mikrotik.com: ip 159.148.147.205 ()
halflife:2019-07-22 03:19:43,029:188337: forum.mikrotik.com: ip 159.148.147.205 AS 51894 (AS_MIKROTIKLS, LV/LV)
halflife:2019-07-22 03:19:43,029:188337: URL tail viewtopic.php?t=140767 is not blacklisted or watched
3:27 AM
[ SmokeDetector ] Blacklists reloaded at rev
8096b01
(SmokeDetector: Auto watch of 614-622-2506
by Machavity) (running on teward/Lunar Eclipse)
[ SmokeDetector ] Blacklists reloaded at rev
09612a8
(SmokeDetector: Auto watch of tesfatravel\.com
by Machavity) (running on teward/Lunar Eclipse)
[ SmokeDetector ] Blacklists reloaded at rev
09612a8
(SmokeDetector: Auto watch of tesfatravel\.com
by Machavity) (running on teward/Lunar Eclipse)
[ SmokeDetector ] SmokeDetector started in standby mode at rev
410e02b
(SmokeDetector: Auto watch of (?-i:o1eHKf-dMwo)
by Makyen) (running on Makyen/EC2-linux)
[ SmokeDetector ] Blacklists reloaded at rev
744a8b1
(SmokeDetector: Auto watch of 1614-622-2506
by Makyen) (running on teward/Lunar Eclipse)
halflife:2019-07-22 03:31:38,320:188339: Check post networkengineering.stackexchange.com/questions/60559 (1)
[ SmokeDetector | MS ] Potentially bad keyword in body (1): What key factors should I consider when buying an edge router for my server room? by Ibrahim Zakarya on
networkengineering.SE
halflife:2019-07-22 03:32:10,704:188340: Extracted URL
http://www.downisynet.rf.gd/article.php?id=14
3:43 AM
[ SmokeDetector | MS ] Potentially bad keyword in answer (1): How do I remove polyurethane spray foam from my hands? by Janice on
diy.SE
4:05 AM
[ SmokeDetector | MS ] Username similar to website in answer (57): How to change magento2 admin url? ✏️ by deanpodgornik on
magento.SE
halflife:2019-07-22 04:05:45,386:188342: Extracted URL
https://www.deanpodgornik.si/magento-2-admin-url
halflife:2019-07-22 04:05:45,387:188342: deanpodgornik.si is not blacklisted or watched
halflife:2019-07-22 04:05:45,387:188342: deanpodgornik.si: ns ['ns1.freedns.si.', 'ns2.freedns.si.', 'ns3.freedns.si.']
halflife:2019-07-22 04:05:45,387:188342: deanpodgornik.si: ip 212.44.102.121 (rcp-7.controlpanel.si.)
halflife:2019-07-22 04:05:45,387:188342: deanpodgornik.si: ip 212.44.102.121 AS 43128 (DHH-AS, SI/SI)
halflife:2019-07-22 04:05:45,387:188342: deanpodgornik.si: ns ['ns1.freedns.si.', 'ns2.freedns.si.', 'ns3.freedns.si.']
halflife:2019-07-22 04:05:45,387:188342: deanpodgornik.si: ip 212.44.102.121 (rcp-7.controlpanel.si.)
halflife:2019-07-22 04:05:45,387:188342: deanpodgornik.si: ip 212.44.102.121 AS 43128 (DHH-AS, SI/SI)
4:51 AM
5:02 AM
halflife:2019-07-22 05:02:28,115:
http://www.jmcargoindia.com/car-transportation-mumbai.html
redirects to https://www.jmcargoindia.com/car-transportation-mumbai.html
@tripleee
halflife:2019-07-22 05:02:29,386:
http://www.jmcargoindia.com/car-transportation-noida.html
redirects to https://www.jmcargoindia.com/car-transportation-noida.html
@tripleee
halflife:2019-07-22 05:02:30,616:
http://www.jmcargoindia.com/car-transportation-gurgaon.html
redirects to https://www.jmcargoindia.com/car-transportation-gurgaon.html
@tripleee
halflife:2019-07-22 05:02:31,805:
http://www.jmcargoindia.com/car-transportation-Navi-Mumbai.html
redirects to https://www.jmcargoindia.com/car-transportation-Navi-Mumbai.html
@tripleee
halflife:2019-07-22 05:02:33,282:
http://www.jmcargoindia.com/car-transportation-bangalore.html
redirects to https://www.jmcargoindia.com/car-transportation-bangalore.html
@tripleee
halflife:2019-07-22 05:02:34,513:
http://www.jmcargoindia.com/car-transport.html
redirects to https://www.jmcargoindia.com/car-transport.html
@tripleee
halflife:2019-07-22 05:02:35,747:
http://www.jmcargoindia.com/car-transportation-kolkata.html
redirects to https://www.jmcargoindia.com/car-transportation-kolkata.html
@tripleee
halflife:2019-07-22 05:02:37,100:
http://www.jmcargoindia.com/car-transportation-delhi.html
redirects to https://www.jmcargoindia.com/car-transportation-delhi.html
@tripleee
halflife:2019-07-22 05:02:40,384:188344: Extracted URL
http://www.jmcargoindia.com/car-transportation-mumbai.html
@tripleee
halflife:2019-07-22 05:02:40,384:188344: jmcargoindia.com is watched @tripleee
halflife:2019-07-22 05:02:40,385:188344: URL tail car-transportation-mumbai.html is not blacklisted or watched
[tag:threshold]halflife:2019-07-22 05:02:40,385:188344: jmcargoindia.com: 4/5 over 302 days, 1:53:47 @tripleee
halflife:2019-07-22 05:02:40,385:188344: URL tail car-transportation-mumbai.html is not blacklisted or watched
[tag:threshold]halflife:2019-07-22 05:02:40,385:188344: jmcargoindia.com: 4/5 over 302 days, 1:53:47 @tripleee
halflife:2019-07-22 05:02:40,385:188344: URL tail car-transportation-noida.html is not blacklisted or watched
halflife:2019-07-22 05:02:40,385:188344: Extracted URL
http://www.jmcargoindia.com/car-transportation-gurgaon.html
@tripleee
[ SmokeDetector | MS ] Potentially bad keyword in body (1): Car Service Washington Dc by Via Go on
meta.SE
[ SmokeDetector ] Blacklists reloaded at rev
2f59726
(SmokeDetector: Auto blacklist of jmcargoindia\.com
by tripleee) (running on teward/Lunar Eclipse)
5:04 AM
halflife:2019-07-22 05:02:40,385:188344: URL tail car-transportation-bangalore.html is not blacklisted or watched
halflife:2019-07-22 05:02:40,463:188344: Extracted URL
http://www.jmcargoindia.com/car-transport.html
@tripleee
[ SmokeDetector ] Blacklists reloaded at rev
f108159
(SmokeDetector: Auto watch of myviago\.com
by tripleee) (running on teward/Lunar Eclipse)
[ SmokeDetector ] Blacklists reloaded at rev
f108159
(SmokeDetector: Auto watch of myviago\.com
by tripleee) (running on teward/Lunar Eclipse)
halflife:2019-07-22 05:02:40,463:188344: URL tail car-transportation-delhi.html is not blacklisted or watched
:51105657 Removed notifications ['jmcargoindia\\.com']
:51105657 Removed notifications ['jmcargoindia\\.com']
halflife:2019-07-22 05:04:08,858:188345: myviago.com is not blacklisted or watched
halflife:2019-07-22 05:04:08,858:188345: myviago.com: ns ['ns-cloud-c3.googledomains.com.', 'ns-cloud-c4.googledomains.com.', 'ns-cloud-c1.googledomains.com.', 'ns-cloud-c2.googledomains.com.']
halflife:2019-07-22 05:04:08,858:188345: myviago.com: ip 3.216.42.65 (ec2-3-216-42-65.compute-1.amazonaws.com.)
halflife:2019-07-22 05:04:08,858:188345: myviago.com: ns ['ns-cloud-c3.googledomains.com.', 'ns-cloud-c4.googledomains.com.', 'ns-cloud-c1.googledomains.com.', 'ns-cloud-c2.googledomains.com.']
halflife:2019-07-22 05:04:08,858:188345: myviago.com: ip 3.216.42.65 (ec2-3-216-42-65.compute-1.amazonaws.com.)
halflife:2019-07-22 05:04:08,858:188345: myviago.com: ip 3.216.42.65 AS 14618 (AMAZON-AES - Amazon.com, Inc., US/US)
halflife:2019-07-22 05:04:08,858:188345: myviago.com: first hit
halflife:2019-07-22 05:04:08,858:188345: myviago.com: first hit
halflife:2019-07-22 05:07:10,268:188346: Check post wordpress.stackexchange.com/questions/343354 (101)
[ SmokeDetector | MS ] Body starts with title and ends in url, potentially bad ns for domain in body, potentially bad keyword in body, potentially bad keyword in username (101): If you as a woman come to about 2000 calories a day and as a man to about 2500 calories, you are doing well by mint02ch on
wordpress.SE
5:07 AM
halflife:2019-07-22 05:07:14,605:188346: fabulamaps.com is not blacklisted or watched
halflife:2019-07-22 05:07:14,605:188346: fabulamaps.com: ns ['dns2.namecheaphosting.com.', 'dns1.namecheaphosting.com.']
halflife:2019-07-22 05:07:14,605:188346: fabulamaps.com: ip 198.54.126.21 (server235-1.web-hosting.com.)
halflife:2019-07-22 05:07:14,605:188346: fabulamaps.com: ip 198.54.126.21 AS 22612 (NAMECHEAP-NET - Namecheap, Inc., US/US)
halflife:2019-07-22 05:07:14,605:188346: fabulamaps.com: ns ['dns2.namecheaphosting.com.', 'dns1.namecheaphosting.com.']
halflife:2019-07-22 05:07:14,605:188346: fabulamaps.com: ip 198.54.126.21 (server235-1.web-hosting.com.)
halflife:2019-07-22 05:07:14,605:188346: fabulamaps.com: ip 198.54.126.21 AS 22612 (NAMECHEAP-NET - Namecheap, Inc., US/US)
[ SmokeDetector ] Blacklists reloaded at rev
45191c7
(SmokeDetector: Auto watch of fabulamaps\.com
by tripleee) (running on teward/Lunar Eclipse)
[ SmokeDetector ] Blacklists reloaded at rev
62d355c
(SmokeDetector: Auto watch of jmc\W*car\W*transport(?:ation)?
by Makyen) (running on teward/Lunar Eclipse)
[ SmokeDetector ] Blacklists reloaded at rev
62d355c
(SmokeDetector: Auto watch of jmc\W*car\W*transport(?:ation)?
by Makyen) (running on teward/Lunar Eclipse)
[ SmokeDetector | MS ] Potentially bad keyword in body (1): How to Download an Entire Website by emily williams on
superuser.com
halflife:2019-07-22 05:13:10,669:188347: Extracted URL
https://askmesetup.com/blog/how-to-download-an-entire-website/
halflife:2019-07-22 05:13:10,670:188347: askmesetup.com is watched
[tag:threshold]halflife:2019-07-22 05:13:10,670:188347: askmesetup.com: 2/3 over 390 days, 19:47:54
[tag:threshold]halflife:2019-07-22 05:13:10,670:188347: askmesetup.com: 2/3 over 390 days, 19:47:54
halflife:2019-07-22 05:13:10,670:188347: about.me is not blacklisted or watched
halflife:2019-07-22 05:13:10,670:188347: about.me: ns ['ns-1214.awsdns-23.org.', 'ns-1631.awsdns-11.co.uk.', 'ns-445.awsdns-55.com.', 'ns-809.awsdns-37.net.']
halflife:2019-07-22 05:13:10,670:188347: about.me: ip 52.203.107.210 (ec2-52-203-107-210.compute-1.amazonaws.com.)
halflife:2019-07-22 05:13:10,670:188347: about.me: ip 54.165.177.247 (ec2-54-165-177-247.compute-1.amazonaws.com.)
halflife:2019-07-22 05:13:10,670:188347: about.me: ns ['ns-1214.awsdns-23.org.', 'ns-1631.awsdns-11.co.uk.', 'ns-445.awsdns-55.com.', 'ns-809.awsdns-37.net.']
halflife:2019-07-22 05:13:10,670:188347: about.me: ip 52.203.107.210 (ec2-52-203-107-210.compute-1.amazonaws.com.)
halflife:2019-07-22 05:13:10,670:188347: about.me: ip 54.165.177.247 (ec2-54-165-177-247.compute-1.amazonaws.com.)
[ SmokeDetector | MS ] Bad keyword in answer (86): Public WiFi access - block router IP to guests by noushadamir on
superuser.com
5:17 AM
websitehalflife:2019-07-22 05:17:44,941:188348: Extracted URL
https://helpmeta.blogspot.com/2019/07/how-to-set-up-your-samsung-smart-tv-to.html
halflife:2019-07-22 05:17:44,941:188348: helpmeta.blogspot.com is not blacklisted or watched
halflife:2019-07-22 05:17:44,941:188348: helpmeta.blogspot.com: ns ['blogspot.l.googleusercontent.com.']
halflife:2019-07-22 05:17:44,941:188348: helpmeta.blogspot.com: ip 74.125.193.132 (ig-in-f132.1e100.net.)
halflife:2019-07-22 05:17:44,941:188348: helpmeta.blogspot.com: ip 74.125.193.132 AS 15169 (GOOGLE - Google LLC, US/US)
halflife:2019-07-22 05:17:44,941:188348: helpmeta.blogspot.com: ns ['blogspot.l.googleusercontent.com.']
halflife:2019-07-22 05:17:44,941:188348: helpmeta.blogspot.com: ip 74.125.193.132 (ig-in-f132.1e100.net.)
halflife:2019-07-22 05:17:44,941:188348: helpmeta.blogspot.com: ip 74.125.193.132 AS 15169 (GOOGLE - Google LLC, US/US)
halflife:2019-07-22 05:17:44,941:188348: helpmeta.blogspot.com: ip blogspot.l.googleusercontent.com. ()
halflife:2019-07-22 05:17:44,941:188348: helpmeta.blogspot.com: ip blogspot.l.googleusercontent.com. AS 15169 (GOOGLE - Google LLC, US/US)
halflife:2019-07-22 05:17:44,941:188348: helpmeta.blogspot.com: first hit
halflife:2019-07-22 05:17:44,941:188348: helpmeta.blogspot.com: ip blogspot.l.googleusercontent.com. AS 15169 (GOOGLE - Google LLC, US/US)
halflife:2019-07-22 05:17:44,941:188348: helpmeta.blogspot.com: first hit
halflife:2019-07-22 05:19:29,791:188349: Extracted URL
https://digitaltrack.in/solution/cloud-migration-services/
halflife:2019-07-22 05:19:29,792:188349: digitaltrack.in is blacklisted
halflife:2019-07-22 05:19:29,792:188349: digitaltrack.in: ns ['space2hostweb.earth.orderbox-dns.com.', 'space2hostweb.mars.orderbox-dns.com.']
halflife:2019-07-22 05:19:29,792:188349: digitaltrack.in: ip 52.66.119.205 (ec2-52-66-119-205.ap-south-1.compute.amazonaws.com.)
halflife:2019-07-22 05:19:29,792:188349: digitaltrack.in: ip 52.66.119.205 AS 16509 (AMAZON-02 - Amazon.com, Inc., US/US)
halflife:2019-07-22 05:19:29,792:188349: digitaltrack.in: ns ['space2hostweb.earth.orderbox-dns.com.', 'space2hostweb.mars.orderbox-dns.com.']
halflife:2019-07-22 05:19:29,792:188349: digitaltrack.in: ip 52.66.119.205 (ec2-52-66-119-205.ap-south-1.compute.amazonaws.com.)
halflife:2019-07-22 05:19:29,792:188349: digitaltrack.in: ip 52.66.119.205 AS 16509 (AMAZON-02 - Amazon.com, Inc., US/US)
[ SmokeDetector | MS ] Username similar to website in answer (57): How do I show only the selected features from an attribute table on a layer? by Mariosmsk on
gis.SE
halflife:2019-07-22 05:20:04,951:188350: mariosmsk.com is not blacklisted or watched
halflife:2019-07-22 05:20:04,951:188350: mariosmsk.com: ns ['ns3.wordpress.com.', 'ns1.wordpress.com.', 'ns2.wordpress.com.']
halflife:2019-07-22 05:20:04,951:188350: mariosmsk.com: ip 192.0.78.193 ()
halflife:2019-07-22 05:20:04,951:188350: mariosmsk.com: ip 192.0.78.193 AS 2635 (AUTOMATTIC - Automattic, Inc, US/US)
halflife:2019-07-22 05:20:05,029:188350: mariosmsk.com: ip 192.0.78.189 ()
halflife:2019-07-22 05:20:04,951:188350: mariosmsk.com: ns ['ns3.wordpress.com.', 'ns1.wordpress.com.', 'ns2.wordpress.com.']
halflife:2019-07-22 05:20:04,951:188350: mariosmsk.com: ip 192.0.78.193 ()
halflife:2019-07-22 05:20:04,951:188350: mariosmsk.com: ip 192.0.78.193 AS 2635 (AUTOMATTIC - Automattic, Inc, US/US)
halflife:2019-07-22 05:20:05,029:188350: mariosmsk.com: ip 192.0.78.189 ()
halflife:2019-07-22 05:20:05,029:188350: mariosmsk.com: ip 192.0.78.189 AS 2635 (AUTOMATTIC - Automattic, Inc, US/US)
halflife:2019-07-22 05:20:05,029:188350: mariosmsk.com: first hit
halflife:2019-07-22 05:20:05,029:188350: mariosmsk.com: first hit
halflife:2019-07-22 05:20:48,157:188351: surveyinfoz.com is not blacklisted or watched
halflife:2019-07-22 05:20:48,157:188351: surveyinfoz.com: ns ['nora.ns.cloudflare.com.', 'chad.ns.cloudflare.com.']
halflife:2019-07-22 05:20:48,157:188351: surveyinfoz.com: ip 104.31.79.155 ()
halflife:2019-07-22 05:20:48,157:188351: surveyinfoz.com: ip 104.31.79.155 AS 13335 (CLOUDFLARENET - Cloudflare, Inc., US/US)
halflife:2019-07-22 05:20:48,157:188351: surveyinfoz.com: ip 104.31.78.155 ()
halflife:2019-07-22 05:20:48,157:188351: surveyinfoz.com: ns ['nora.ns.cloudflare.com.', 'chad.ns.cloudflare.com.']
halflife:2019-07-22 05:20:48,157:188351: surveyinfoz.com: ip 104.31.79.155 ()
halflife:2019-07-22 05:20:48,157:188351: surveyinfoz.com: ip 104.31.79.155 AS 13335 (CLOUDFLARENET - Cloudflare, Inc., US/US)
halflife:2019-07-22 05:20:48,157:188351: surveyinfoz.com: ip 104.31.78.155 ()
[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, blacklisted website in body, link at end of body, pattern-matching product name in body, +3 more (494): https //awaretalks com/keto-fit-italy/ by letitiaseibel on
askubuntu.com
halflife:2019-07-22 05:23:37,662:188352: awaretalks.com is blacklisted
halflife:2019-07-22 05:23:37,662:188352: awaretalks.com: ns ['dns1.namecheaphosting.com.', 'dns2.namecheaphosting.com.']
halflife:2019-07-22 05:23:37,662:188352: awaretalks.com: ip 199.188.200.109 (server237-3.web-hosting.com.)
halflife:2019-07-22 05:23:37,662:188352: URL tail keto-fit-italy is not blacklisted or watched
halflife:2019-07-22 05:23:37,662:188352: awaretalks.com: ns ['dns1.namecheaphosting.com.', 'dns2.namecheaphosting.com.']
halflife:2019-07-22 05:23:37,662:188352: awaretalks.com: ip 199.188.200.109 (server237-3.web-hosting.com.)
halflife:2019-07-22 05:23:37,662:188352: URL tail keto-fit-italy is not blacklisted or watched
[ SmokeDetector ] SmokeDetector started at rev
62d355c
(SmokeDetector: Auto watch of jmc\W*car\W*transport(?:ation)?
by Makyen) (running on teward/Lunar Eclipse, Python 3.6.7)
5:27 AM
halflife:2019-07-22 05:27:28,598:188353: Check post graphicdesign.stackexchange.com/questions/126860 (393)
halflife:2019-07-22 05:27:32,650:188353: Wordpress promotion URL
http://clicky.com/101186425
redirects to https://clicky.com/101186425
halflife:2019-07-22 05:27:37,161:188353: clicky.com: ns ['ns11.dnsmadeeasy.com.', 'ns12.dnsmadeeasy.com.', 'ns13.dnsmadeeasy.com.', 'ns14.dnsmadeeasy.com.', 'ns15.dnsmadeeasy.com.', 'ns10.dnsmadeeasy.com.']
halflife:2019-07-22 05:27:37,161:188353: clicky.com: ip 198.145.13.13 (getclicky.com.)
halflife:2019-07-22 05:27:37,161:188353: clicky.com: ip 198.145.13.13 AS 2044 (IINET-2044 - Infinity Internet, Inc., US/US)
halflife:2019-07-22 05:27:37,161:188353: clicky.com: ip 198.145.13.13 (getclicky.com.)
halflife:2019-07-22 05:27:37,161:188353: clicky.com: ip 198.145.13.13 AS 2044 (IINET-2044 - Infinity Internet, Inc., US/US)
[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, blacklisted website in body, pattern-matching product name in body, potentially bad ns for domain in body (393): Nutrigen Forskolin - How Fast Will I Lose Weight | Seelio by user140630 on
graphicdesign.SE
halflife:2019-07-22 05:27:37,161:188353: clicky.com: ip 198.145.13.11 (getclicky.com.)
halflife:2019-07-22 05:27:37,161:188353: clicky.com: ip 198.145.13.11 AS 2044 (IINET-2044 - Infinity Internet, Inc., US/US)
halflife:2019-07-22 05:27:37,161:188353: clicky.com: ip 198.145.13.14 (getclicky.com.)
halflife:2019-07-22 05:27:37,161:188353: clicky.com: ip 198.145.13.14 AS 2044 (IINET-2044 - Infinity Internet, Inc., US/US)
halflife:2019-07-22 05:27:37,161:188353: clicky.com: ip 198.145.13.11 AS 2044 (IINET-2044 - Infinity Internet, Inc., US/US)
halflife:2019-07-22 05:27:37,161:188353: clicky.com: ip 198.145.13.14 (getclicky.com.)
halflife:2019-07-22 05:27:37,161:188353: clicky.com: ip 198.145.13.14 AS 2044 (IINET-2044 - Infinity Internet, Inc., US/US)
halflife:2019-07-22 05:27:37,161:188353: URL tail 101186425 is not blacklisted or watched
halflife:2019-07-22 05:27:37,161:188353: slimtonepills.com: ns ['dns2.namecheaphosting.com.', 'dns1.namecheaphosting.com.']
halflife:2019-07-22 05:27:37,161:188353: slimtonepills.com: ip 198.187.29.252 (premium74-3.web-hosting.com.)
halflife:2019-07-22 05:27:37,161:188353: URL tail nutrigen-forskolin is not blacklisted or watched
halflife:2019-07-22 05:27:37,161:188353: slimtonepills.com: ns ['dns2.namecheaphosting.com.', 'dns1.namecheaphosting.com.']
halflife:2019-07-22 05:27:37,161:188353: slimtonepills.com: ip 198.187.29.252 (premium74-3.web-hosting.com.)
halflife:2019-07-22 05:27:37,161:188353: URL tail nutrigen-forskolin is not blacklisted or watched
[ SmokeDetector ] Blacklists reloaded at rev
ae0c569
(SmokeDetector: Auto watch of surveyinfoz\.com
by tripleee) (running on teward/Lunar Eclipse)
[ SmokeDetector ] Blacklists reloaded at rev
0ad8825
(SmokeDetector: Auto watch of mariosmsk\.com
by tripleee) (running on teward/Lunar Eclipse)
[ SmokeDetector ] Blacklists reloaded at rev
947eda9
(SmokeDetector: Auto watch of helpmeta\.blogspot
by tripleee) (running on teward/Lunar Eclipse)
[ SmokeDetector ] Blacklists reloaded at rev
947eda9
(SmokeDetector: Auto watch of helpmeta\.blogspot
by tripleee) (running on teward/Lunar Eclipse)
5:39 AM
halflife:2019-07-22 05:39:26,393:188354: Extracted URL
https://admhelp.microfocus.com/alm/en/14.00/online_help/Content/SSO/alm-api-authentication.html
halflife:2019-07-22 05:39:26,393:188354: admhelp.microfocus.com is not blacklisted or watched
halflife:2019-07-22 05:39:26,393:188354: admhelp.microfocus.com: ns ['d1ouadzpu8qci8.cloudfront.net.', 'ns-900.awsdns-48.net.', 'ns-1209.awsdns-23.org.', 'ns-1946.awsdns-51.co.uk.', 'ns-422.awsdns-52.com.']
halflife:2019-07-22 05:39:26,393:188354: admhelp.microfocus.com: ip 99.86.122.106 (server-99-86-122-106.dub2.r.cloudfront.net.)
halflife:2019-07-22 05:39:26,393:188354: admhelp.microfocus.com: ns ['d1ouadzpu8qci8.cloudfront.net.', 'ns-900.awsdns-48.net.', 'ns-1209.awsdns-23.org.', 'ns-1946.awsdns-51.co.uk.', 'ns-422.awsdns-52.com.']
halflife:2019-07-22 05:39:26,393:188354: admhelp.microfocus.com: ip 99.86.122.106 (server-99-86-122-106.dub2.r.cloudfront.net.)
halflife:2019-07-22 05:39:26,394:188354: admhelp.microfocus.com: ip 99.86.122.111 (server-99-86-122-111.dub2.r.cloudfront.net.)
halflife:2019-07-22 05:39:26,394:188354: admhelp.microfocus.com: ip d1ouadzpu8qci8.cloudfront.net. ()
halflife:2019-07-22 05:39:26,394:188354: admhelp.microfocus.com: ip 99.86.122.28 (server-99-86-122-28.dub2.r.cloudfront.net.)
halflife:2019-07-22 05:39:26,394:188354: admhelp.microfocus.com: ip 99.86.122.108 (server-99-86-122-108.dub2.r.cloudfront.net.)
halflife:2019-07-22 05:39:26,394:188354: admhelp.microfocus.com: ip d1ouadzpu8qci8.cloudfront.net. ()
halflife:2019-07-22 05:39:26,394:188354: admhelp.microfocus.com: ip 99.86.122.28 (server-99-86-122-28.dub2.r.cloudfront.net.)
halflife:2019-07-22 05:39:26,394:188354: admhelp.microfocus.com: ip 99.86.122.108 (server-99-86-122-108.dub2.r.cloudfront.net.)
halflife:2019-07-22 05:43:55,945:188355: Check post english.stackexchange.com/questions/505793 (460)
halflife:2019-07-22 05:44:00,009:188355: Extracted URL
https://dietsheriff.com/blood-sugar-stabilizer-reviews/
halflife:2019-07-22 05:44:00,010:188355: dietsheriff.com is blacklisted
halflife:2019-07-22 05:44:00,010:188355: dietsheriff.com: ns ['wns10.hostgator.in.', 'wns9.hostgator.in.']
halflife:2019-07-22 05:44:00,010:188355: dietsheriff.com: ip 96.125.162.157 ()
halflife:2019-07-22 05:44:00,010:188355: URL tail blood-sugar-stabilizer is not blacklisted or watched
halflife:2019-07-22 05:44:00,010:188355: dietsheriff.com: ns ['wns10.hostgator.in.', 'wns9.hostgator.in.']
halflife:2019-07-22 05:44:00,010:188355: dietsheriff.com: ip 96.125.162.157 ()
halflife:2019-07-22 05:44:00,010:188355: URL tail blood-sugar-stabilizer is not blacklisted or watched
[ SmokeDetector | MS ] Bad pattern in url body, blacklisted website in body, pattern-matching website in body, potentially bad ns for domain in body, repeated url at end of long post, +1 more (460): Diabetes and Children - Has Your Child Been Misdiagnosed? by Shanu Sweet on
english.SE
[ SmokeDetector ] SmokeDetector started in standby mode at rev
45d03cb
(SmokeDetector: Auto blacklist of litextension\.com
by tripleee) (running on iBug/DeepSea)
halflife:2019-07-22 05:48:42,269:188356: Check post puzzling.stackexchange.com/questions/86400 (688)
[ SmokeDetector | MS ] Url in title, bad keyword in body, bad keyword in title, blacklisted website in body, blacklisted website in title, +4 more (688): welnesscare.com/keto-plus-colombia/ by fsdghar on
puzzling.SE
halflife:2019-07-22 05:48:47,528:188356: welnesscare.com is blacklisted
halflife:2019-07-22 05:48:47,529:188356: welnesscare.com: ns ['ns26.domaincontrol.com.', 'ns25.domaincontrol.com.']
halflife:2019-07-22 05:48:47,606:188356: welnesscare.com: ip 166.62.27.56 (ip-166-62-27-56.ip.secureserver.net.)
halflife:2019-07-22 05:48:47,606:188356: welnesscare.com: ip 166.62.27.56 AS 26496 (AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC, US/US)
halflife:2019-07-22 05:48:47,529:188356: welnesscare.com: ns ['ns26.domaincontrol.com.', 'ns25.domaincontrol.com.']
halflife:2019-07-22 05:48:47,606:188356: welnesscare.com: ip 166.62.27.56 (ip-166-62-27-56.ip.secureserver.net.)
halflife:2019-07-22 05:48:47,606:188356: welnesscare.com: ip 166.62.27.56 AS 26496 (AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC, US/US)
5:54 AM
[ SmokeDetector | MS ] Bad keyword in answer, blacklisted website in answer, potentially bad ns for domain in answer (179): My laptop is plugged in, charging but power is not increasing by charlie909 on
superuser.com
halflife:2019-07-22 05:54:44,014:
https://oniton.com/blog/windows-10-startup-folder-not-working/
redirects to https://www.oniton.com/blog/windows-10-startup-folder-not-working/
[ SmokeDetector | MS ] Potentially bad keyword in answer, username similar to website in answer, blacklisted user (128): Showing only selected features from attribute table on layer using QGIS? by Mariosmsk on
gis.SE
[ SmokeDetector | MS ] Url-only title, bad keyword in body, blacklisted website in body, blacklisted website in title, pattern-matching product name in body, +6 more (694): walgreensdiet.com/spring-hall-health-keto/ by delimisorow on
askubuntu.com
halflife:2019-07-22 06:04:59,766:188359: Extracted URL
https://walgreensdiet.com/spring-hall-health-keto/
halflife:2019-07-22 06:04:59,766:188359: Wordpress promotion URL
https://walgreensdiet.com/joyelle-derma-cream-buy/
redirects to https://justketodiet.com/offers/vintl?affid=aff&sub1=5053&sub2=&clickId=259709141
halflife:2019-07-22 06:05:01,105:188359: justketodiet.com: ns ['ns-usa.topdns.com.', 'ns-canada.topdns.com.', 'ns-uk.topdns.com.']
halflife:2019-07-22 06:05:01,105:188359: justketodiet.com: ip 35.180.152.244 (ec2-35-180-152-244.eu-west-3.compute.amazonaws.com.)
halflife:2019-07-22 06:05:01,105:188359: justketodiet.com: ip 35.180.152.244 (ec2-35-180-152-244.eu-west-3.compute.amazonaws.com.)
halflife:2019-07-22 06:05:01,105:188359: Wordpress promotion URL
https://walgreensdiet.com/ketogenic-accelerator-buy/
redirects to https://www.venturesupplements.com/ketogenicaccelerator/
halflife:2019-07-22 06:05:03,760:188359: venturesupplements.com: ns ['ns3.dreamhost.com.', 'ns1.dreamhost.com.', 'ns2.dreamhost.com.']
halflife:2019-07-22 06:05:03,760:188359: venturesupplements.com: ip 208.97.138.179 (ds11230.dreamservers.com.)
halflife:2019-07-22 06:05:03,760:188359: venturesupplements.com: ip 208.97.138.179 AS 26347 (DREAMHOST-AS - New Dream Network, LLC, US/US)
halflife:2019-07-22 06:05:03,760:188359: URL tail ketogenicaccelerator is not blacklisted or watched
halflife:2019-07-22 06:05:03,760:188359: venturesupplements.com: ip 208.97.138.179 (ds11230.dreamservers.com.)
halflife:2019-07-22 06:05:03,760:188359: venturesupplements.com: ip 208.97.138.179 AS 26347 (DREAMHOST-AS - New Dream Network, LLC, US/US)
halflife:2019-07-22 06:05:03,760:188359: URL tail ketogenicaccelerator is not blacklisted or watched
halflife:2019-07-22 06:05:03,760:188359: Wordpress promotion URL
https://walgreensdiet.com/keto-tone-france-buy/
redirects to https://ketobruleurdegraisse.com/an/?AFID=4171&sub1=5805&sub2=
halflife:2019-07-22 06:05:13,127:188359: ketobruleurdegraisse.com: ns ['anna.ns.cloudflare.com.', 'ed.ns.cloudflare.com.']
halflife:2019-07-22 06:05:13,127:188359: ketobruleurdegraisse.com: ip 104.27.132.250 ()
halflife:2019-07-22 06:05:13,127:188359: ketobruleurdegraisse.com: ip 104.27.133.250 ()
halflife:2019-07-22 06:05:13,128:188359: walgreensdiet.com: ns ['ns32.domaincontrol.com.', 'ns31.domaincontrol.com.']
halflife:2019-07-22 06:05:13,127:188359: ketobruleurdegraisse.com: ip 104.27.132.250 ()
halflife:2019-07-22 06:05:13,127:188359: ketobruleurdegraisse.com: ip 104.27.133.250 ()
halflife:2019-07-22 06:05:13,128:188359: walgreensdiet.com: ns ['ns32.domaincontrol.com.', 'ns31.domaincontrol.com.']
halflife:2019-07-22 06:05:13,128:188359: walgreensdiet.com: ip 107.180.3.93 (ip-107-180-3-93.ip.secureserver.net.)
halflife:2019-07-22 06:05:13,128:188359: URL tail spring-hall-health-keto is matched in /spring-hall-health-keto/
halflife:2019-07-22 06:05:13,128:188359: URL tail spring-hall-health-keto is matched in /spring-hall-health-keto/
halflife:2019-07-22 06:05:13,128:188359: maptia.com is blacklisted
halflife:2019-07-22 06:05:13,128:188359: maptia.com: ns ['ns4.dnsimple.com.', 'ns1.dnsimple.com.', 'ns2.dnsimple.com.', 'ns3.dnsimple.com.']
halflife:2019-07-22 06:05:13,128:188359: maptia.com: ip 34.231.75.48 (ec2-34-231-75-48.compute-1.amazonaws.com.)
halflife:2019-07-22 06:05:13,128:188359: maptia.com: ip 52.72.145.109 (ec2-52-72-145-109.compute-1.amazonaws.com.)
halflife:2019-07-22 06:05:13,128:188359: maptia.com: ns ['ns4.dnsimple.com.', 'ns1.dnsimple.com.', 'ns2.dnsimple.com.', 'ns3.dnsimple.com.']
halflife:2019-07-22 06:05:13,128:188359: maptia.com: ip 34.231.75.48 (ec2-34-231-75-48.compute-1.amazonaws.com.)
halflife:2019-07-22 06:05:13,128:188359: maptia.com: ip 52.72.145.109 (ec2-52-72-145-109.compute-1.amazonaws.com.)
halflife:2019-07-22 06:05:13,128:188359: maptia.com: ip 52.2.175.150 (ec2-52-2-175-150.compute-1.amazonaws.com.)
halflife:2019-07-22 06:05:13,128:188359: maptia.com: ip 34.224.236.142 (ec2-34-224-236-142.compute-1.amazonaws.com.)
halflife:2019-07-22 06:05:13,129:188359: maptia.com: ip 34.206.9.96 (ec2-34-206-9-96.compute-1.amazonaws.com.)
halflife:2019-07-22 06:05:13,129:188359: maptia.com: ip 52.200.123.104 (ec2-52-200-123-104.compute-1.amazonaws.com.)
halflife:2019-07-22 06:05:13,128:188359: maptia.com: ip 34.224.236.142 (ec2-34-224-236-142.compute-1.amazonaws.com.)
halflife:2019-07-22 06:05:13,129:188359: maptia.com: ip 34.206.9.96 (ec2-34-206-9-96.compute-1.amazonaws.com.)
halflife:2019-07-22 06:05:13,129:188359: maptia.com: ip 52.200.123.104 (ec2-52-200-123-104.compute-1.amazonaws.com.)
halflife:2019-07-22 06:05:13,129:188359: maptia.com: ip 52.3.53.115 (ec2-52-3-53-115.compute-1.amazonaws.com.)
halflife:2019-07-22 06:05:13,129:188359: maptia.com: ip 34.200.203.60 (ec2-34-200-203-60.compute-1.amazonaws.com.)
halflife:2019-07-22 06:05:13,129:188359: URL tail walgreensdiet is not blacklisted or watched
halflife:2019-07-22 06:05:13,129:188359: maptia.com: ip 34.200.203.60 (ec2-34-200-203-60.compute-1.amazonaws.com.)
halflife:2019-07-22 06:05:13,129:188359: URL tail walgreensdiet is not blacklisted or watched
halflife:2019-07-22 06:05:13,129:188359: Extracted URL
https://medium.com/@delimisorow/https-walgreensdiet-com-spring-hall-health-keto-f1801e5d23d2?sk=6ed1acbe71e15e30e312199612010ddc
halflife:2019-07-22 06:05:13,170:188359: medium.com is not blacklisted or watched
halflife:2019-07-22 06:05:13,170:188359: medium.com: ns ['kip.ns.cloudflare.com.', 'alina.ns.cloudflare.com.']
halflife:2019-07-22 06:05:13,170:188359: medium.com: ip 104.16.121.127 ()
halflife:2019-07-22 06:05:13,170:188359: medium.com: ip 104.16.120.127 ()
halflife:2019-07-22 06:05:13,170:188359: medium.com: ip 104.16.123.127 ()
halflife:2019-07-22 06:05:13,170:188359: medium.com: ip 104.16.122.127 ()
halflife:2019-07-22 06:05:13,170:188359: medium.com: ns ['kip.ns.cloudflare.com.', 'alina.ns.cloudflare.com.']
halflife:2019-07-22 06:05:13,170:188359: medium.com: ip 104.16.121.127 ()
halflife:2019-07-22 06:05:13,170:188359: medium.com: ip 104.16.120.127 ()
halflife:2019-07-22 06:05:13,170:188359: medium.com: ip 104.16.123.127 ()
halflife:2019-07-22 06:05:13,170:188359: medium.com: ip 104.16.122.127 ()
halflife:2019-07-22 06:05:13,170:188359: medium.com: ip 104.16.124.127 ()
halflife:2019-07-22 06:05:13,170:188359: medium.com: 7/10 over 4 days, 4:02:23
halflife:2019-07-22 06:05:13,170:188359: medium.com: 7/10 over 4 days, 4:02:23
halflife:2019-07-22 06:05:17,138:188360: Extracted URL
https://www.teeztareen.com/2019/07/data-structure-tutorial.html%20
6:09 AM
[ SmokeDetector ] Blacklists reloaded at rev
25211ce
(SmokeDetector: Auto watch of teeztareen\.com
by tripleee) (running on teward/Lunar Eclipse)
halflife:2019-07-22 06:10:50,733:188361: Extracted URL
https://docs.djangoproject.com/en/2.2/howto/custom-template-tags/
halflife:2019-07-22 06:10:50,733:188361: docs.djangoproject.com is not blacklisted or watched
halflife:2019-07-22 06:10:50,733:188361: docs.djangoproject.com: ns ['dualstack.osff2.map.fastly.net.']
halflife:2019-07-22 06:10:50,733:188361: docs.djangoproject.com: ip dualstack.osff2.map.fastly.net. ()
halflife:2019-07-22 06:10:50,733:188361: docs.djangoproject.com: ip 151.101.18.217 ()
halflife:2019-07-22 06:10:50,733:188361: docs.djangoproject.com: 0/10 over 148 days, 19:10:55
halflife:2019-07-22 06:10:50,733:188361: docs.djangoproject.com: ns ['dualstack.osff2.map.fastly.net.']
halflife:2019-07-22 06:10:50,733:188361: docs.djangoproject.com: ip dualstack.osff2.map.fastly.net. ()
halflife:2019-07-22 06:10:50,733:188361: docs.djangoproject.com: ip 151.101.18.217 ()
halflife:2019-07-22 06:10:50,733:188361: docs.djangoproject.com: 0/10 over 148 days, 19:10:55
halflife:2019-07-22 06:11:30,392:188362: Check post security.stackexchange.com/questions/213899 (594)
[ SmokeDetector | MS ] Url in title, bad keyword in body, bad keyword in title, blacklisted website in body, blacklisted website in title, +8 more (887): supplementeffects.com/enhanced-keto/ by ypwzqojg on
security.SE
halflife:2019-07-22 06:11:33,882:188362: HTTP status 404 for
https://supplementeffects.com/enhanced-keto/
halflife:2019-07-22 06:11:33,883:188362: supplementeffects.com: ns ['dns2.namecheaphosting.com.', 'dns1.namecheaphosting.com.']
halflife:2019-07-22 06:11:33,883:188362: supplementeffects.com: ip 104.219.248.97 (server136-5.web-hosting.com.)
halflife:2019-07-22 06:11:33,883:188362: URL tail enhanced-keto is not blacklisted or watched
halflife:2019-07-22 06:11:33,883:188362: supplementeffects.com: ip 104.219.248.97 (server136-5.web-hosting.com.)
halflife:2019-07-22 06:11:33,883:188362: URL tail enhanced-keto is not blacklisted or watched
[ SmokeDetector | MS ] Bad keyword in body, link at end of body (195): WHAT ARE THE COURSES AVAILABLE AT RCMB COLLEGE? by Regional college of management on
meta.SE
halflife:2019-07-22 06:19:52,579:188363: Extracted URL
https://www.rcmb.in/list-top-mba-colleges-bangalore/
halflife:2019-07-22 06:19:52,579:188363: rcmb.in is not blacklisted or watched
halflife:2019-07-22 06:19:52,579:188363: URL tail list-top-mba-colleges-bangalore is not blacklisted or watched
halflife:2019-07-22 06:19:52,579:188363: rcmb.in: first hit
halflife:2019-07-22 06:19:52,579:188363: URL tail list-top-mba-colleges-bangalore is not blacklisted or watched
halflife:2019-07-22 06:19:52,579:188363: rcmb.in: first hit
halflife:2019-07-22 06:19:52,579:188363: Extracted URL
https://www.rcmb.in/best-placement-colleges-in-bangalore/
6:21 AM
[ SmokeDetector ] Blacklists reloaded at rev
5959927
(SmokeDetector: Auto watch of rcmb\.in
by Makyen) (running on teward/Lunar Eclipse)
[ SmokeDetector ] Blacklists reloaded at rev
bc61e87
(SmokeDetector: Auto watch of delimisorow
by Makyen) (running on teward/Lunar Eclipse)
[ SmokeDetector ] Blacklists reloaded at rev
77b7f9c
(SmokeDetector: Auto watch of (?-i:CXzNIoO1ZqI)
by Makyen) (running on teward/Lunar Eclipse)
[ SmokeDetector ] Blacklists reloaded at rev
77b7f9c
(SmokeDetector: Auto watch of (?-i:CXzNIoO1ZqI)
by Makyen) (running on teward/Lunar Eclipse)
halflife:2019-07-22 06:23:41,628:188364: Check post hardwarerecs.stackexchange.com/questions/11650 (68)
[ SmokeDetector | MS ] Bad keyword in link text in body (68): need high quality gate valves by devbrat ravi on
hardwarerecs.SE
halflife:2019-07-22 06:23:44,545:188364: khdvalvesautomation.com is not blacklisted or watched
halflife:2019-07-22 06:23:44,545:188364: khdvalvesautomation.com: ns ['ns10.premiumwebservers.com.', 'ns9.premiumwebservers.com.']
halflife:2019-07-22 06:23:44,583:188364: khdvalvesautomation.com: ip 151.80.25.200 (nxg9270.premiumwebservers.com.)
halflife:2019-07-22 06:23:44,583:188364: khdvalvesautomation.com: ip 151.80.25.200 AS 16276 (OVH, FR/FR)
halflife:2019-07-22 06:23:44,545:188364: khdvalvesautomation.com: ns ['ns10.premiumwebservers.com.', 'ns9.premiumwebservers.com.']
halflife:2019-07-22 06:23:44,583:188364: khdvalvesautomation.com: ip 151.80.25.200 (nxg9270.premiumwebservers.com.)
halflife:2019-07-22 06:23:44,583:188364: khdvalvesautomation.com: ip 151.80.25.200 AS 16276 (OVH, FR/FR)
[ SmokeDetector ] Blacklists reloaded at rev
dd5ab30
(SmokeDetector: Auto watch of khdvalvesautomation\.com
by tripleee) (running on teward/Lunar Eclipse)
halflife:2019-07-22 06:24:56,540:188365: Check post graphicdesign.stackexchange.com/questions/126861 (393)
6:25 AM
[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, blacklisted website in body, pattern-matching product name in body, potentially bad ns for domain in body (393): Nutrigen Forskolin: Warning {Nutrigen Forskolin} by user140632 on
graphicdesign.SE
[ SmokeDetector | MS ] Url-only title, blacklisted website in body, blacklisted website in title, body starts with title and ends in url, link at end of body, +7 more (795): walgreensdiet.com/spring-hall-health-keto/ by estheallistere on
askubuntu.com
halflife:2019-07-22 06:24:57,031:188365: Wordpress promotion URL
http://clicky.com/101186425
redirects to https://clicky.com/101186425
halflife:2019-07-22 06:24:57,770:188365: URL tail 101186425 is not blacklisted or watched
halflife:2019-07-22 06:24:57,771:188365: URL tail nutrigen-forskolin is not blacklisted or watched
halflife:2019-07-22 06:24:57,771:188365: URL tail nutrigen-forskolin is not blacklisted or watched
halflife:2019-07-22 06:25:00,028:Visited URL at 2019-07-22 06:04:11.652377; returning cached result for
https://walgreensdiet.com/spring-hall-health-keto/
halflife:2019-07-22 06:25:00,029:Visited URL at 2019-07-22 06:04:15.666472; returning cached result for
https://walgreensdiet.com/joyelle-derma-cream-buy/
halflife:2019-07-22 06:25:00,029:Visited URL at 2019-07-22 06:04:23.119940; returning cached result for
https://walgreensdiet.com/ketogenic-accelerator-buy/
halflife:2019-07-22 06:25:00,029:Visited URL at 2019-07-22 06:04:26.523701; returning cached result for
https://walgreensdiet.com/keto-tone-france-buy/
halflife:2019-07-22 06:25:00,111:188366: Extracted URL
https://walgreensdiet.com/spring-hall-health-keto/
halflife:2019-07-22 06:25:00,111:188366: Wordpress promotion URL
https://walgreensdiet.com/joyelle-derma-cream-buy/
redirects to https://justketodiet.com/offers/vintl?affid=aff&sub1=5053&sub2=&clickId=259709141
halflife:2019-07-22 06:25:00,477:188366: Wordpress promotion URL
https://walgreensdiet.com/ketogenic-accelerator-buy/
redirects to https://www.venturesupplements.com/ketogenicaccelerator/
halflife:2019-07-22 06:25:01,335:188366: URL tail ketogenicaccelerator is not blacklisted or watched
halflife:2019-07-22 06:25:01,336:188366: Wordpress promotion URL
https://walgreensdiet.com/keto-tone-france-buy/
redirects to https://ketobruleurdegraisse.com/an/?AFID=4171&sub1=5805&sub2=
[ SmokeDetector | MS ] Bad keyword in link text in answer, potentially bad keyword in answer (82): need high quality gate valves by Siddhi khanvilkar on
hardwarerecs.SE
halflife:2019-07-22 06:35:59,456:188367: Extracted URL
http://www.khdvalvesautomation.com/valves-products/gate-valves.php
halflife:2019-07-22 06:35:59,456:188367: khdvalvesautomation.com is watched
halflife:2019-07-22 06:35:59,456:188367: khdvalvesautomation.com: 1/2 over 0:12:15
halflife:2019-07-22 06:35:59,456:188367: khdvalvesautomation.com: 1/2 over 0:12:15
6:50 AM
[ SmokeDetector | MS ] Potentially bad keyword in body (1): What is language Processor by Muhammad Waqar on
superuser.com
halflife:2019-07-22 06:50:33,100:188368: wuschools.com is not blacklisted or watched
halflife:2019-07-22 06:50:33,100:188368: URL tail post.php?post_id=77 is not blacklisted or watched
[tag:threshold]halflife:2019-07-22 06:50:33,100:188368: wuschools.com: 2/3 over 3:45:01
halflife:2019-07-22 06:50:33,100:188368: URL tail post.php?post_id=77 is not blacklisted or watched
[tag:threshold]halflife:2019-07-22 06:50:33,100:188368: wuschools.com: 2/3 over 3:45:01
halflife:2019-07-22 06:54:34,151:188369: Check post security.stackexchange.com/questions/213900 (173)
[ SmokeDetector | MS ] Blacklisted website in body, potentially bad asn for hostname in body, potentially bad ip for hostname in body, potentially bad keyword in body, potentially bad keyword in title, +1 more (173): 7z password recovery by izabela anna on
security.SE
halflife:2019-07-22 06:54:44,309:188369: 7zunlocker.com is watched
halflife:2019-07-22 06:54:44,310:188369: 7zunlocker.com: ns ['ns5001.mochahost.com.', 'ns6001.mochahost.com.']
halflife:2019-07-22 06:54:44,310:188369: 7zunlocker.com: ip 198.38.82.90 (mocha4005-web1.my-hosting-panel.com.)
halflife:2019-07-22 06:54:44,310:188369: 7zunlocker.com: ip 198.38.82.90 AS 23352 (SERVERCENTRAL - Server Central Network, US/US)
halflife:2019-07-22 06:54:44,310:188369: 7zunlocker.com: ns ['ns5001.mochahost.com.', 'ns6001.mochahost.com.']
halflife:2019-07-22 06:54:44,310:188369: 7zunlocker.com: ip 198.38.82.90 (mocha4005-web1.my-hosting-panel.com.)
halflife:2019-07-22 06:54:44,310:188369: 7zunlocker.com: ip 198.38.82.90 AS 23352 (SERVERCENTRAL - Server Central Network, US/US)
halflife:2019-07-22 06:54:44,310:188369: Extracted URL
https://www.esofttools.com/7z-password-recovery.html
halflife:2019-07-22 06:54:44,310:188369: esofttools.com is blacklisted
halflife:2019-07-22 06:54:44,310:188369: esofttools.com: ns ['ns5001.mochahost.com.', 'ns6001.mochahost.com.']
halflife:2019-07-22 06:54:44,310:188369: esofttools.com: ip 198.38.82.90 (mocha4005-web1.my-hosting-panel.com.)
halflife:2019-07-22 06:54:44,310:188369: URL tail 7z-password-recovery.html is not blacklisted or watched
halflife:2019-07-22 06:54:44,310:188369: esofttools.com: ns ['ns5001.mochahost.com.', 'ns6001.mochahost.com.']
halflife:2019-07-22 06:54:44,310:188369: esofttools.com: ip 198.38.82.90 (mocha4005-web1.my-hosting-panel.com.)
halflife:2019-07-22 06:54:44,310:188369: URL tail 7z-password-recovery.html is not blacklisted or watched
halflife:2019-07-22 06:56:03,831:188370: Extracted URL
https://css-tricks.com/snippets/css/a-guide-to-flexbox/
halflife:2019-07-22 06:56:03,831:188370: css-tricks.com is not blacklisted or watched
halflife:2019-07-22 06:56:03,831:188370: css-tricks.com: ns ['dave.ns.cloudflare.com.', 'fay.ns.cloudflare.com.']
halflife:2019-07-22 06:56:03,831:188370: css-tricks.com: ip 104.26.11.78 ()
halflife:2019-07-22 06:56:03,831:188370: css-tricks.com: ip 104.26.10.78 ()
halflife:2019-07-22 06:56:03,831:188370: css-tricks.com: 0/10 over 267 days, 16:52:35
halflife:2019-07-22 06:56:03,831:188370: css-tricks.com: ns ['dave.ns.cloudflare.com.', 'fay.ns.cloudflare.com.']
halflife:2019-07-22 06:56:03,831:188370: css-tricks.com: ip 104.26.11.78 ()
halflife:2019-07-22 06:56:03,831:188370: css-tricks.com: ip 104.26.10.78 ()
halflife:2019-07-22 06:56:03,831:188370: css-tricks.com: 0/10 over 267 days, 16:52:35
[ SmokeDetector | MS ] Bad keyword in body, potentially bad keyword in body (97): Is stem cell banking worth it? by My Cord on
superuser.com
7:02 AM
[ SmokeDetector | MS ] Potentially bad keyword in answer, blacklisted user (71): Internet connection randomly disconnect by Muhammad Waqar on
superuser.com
halflife:2019-07-22 07:05:16,789:Visited URL at 2019-07-22 03:05:32.411971; returning cached result for
https://wuschools.com/post.php?post_id=77
[ SmokeDetector | MS ] Potentially bad keyword in answer, username similar to website in answer (58): Is there an API or global database for sports events that is used by famous sports websites? by iSports API on
opendata.SE
halflife:2019-07-22 07:09:30,945:188373: isportsapi.com: ns ['dns2.hichina.com.', 'dns1.hichina.com.']
halflife:2019-07-22 07:09:30,945:188373: isportsapi.com: ip 47.90.250.142 ()
halflife:2019-07-22 07:09:30,945:188373: isportsapi.com: ip 47.90.250.142 AS 45102 (CNNIC-ALIBABA-US-NET-AP Alibaba (US) Technology Co., Ltd., CN/CN)
halflife:2019-07-22 07:09:30,945:188373: URL tail ][1] is not blacklisted or watched
halflife:2019-07-22 07:09:30,945:188373: isportsapi.com: 1/2 over 3 days, 3:32:49
halflife:2019-07-22 07:09:30,945:188373: isportsapi.com: ip 47.90.250.142 ()
halflife:2019-07-22 07:09:30,945:188373: isportsapi.com: ip 47.90.250.142 AS 45102 (CNNIC-ALIBABA-US-NET-AP Alibaba (US) Technology Co., Ltd., CN/CN)
halflife:2019-07-22 07:09:30,945:188373: URL tail ][1] is not blacklisted or watched
halflife:2019-07-22 07:09:30,945:188373: isportsapi.com: 1/2 over 3 days, 3:32:49
[ SmokeDetector | MS ] Manually reported question (93): walahala: Decentralized Wallet by Walahala on
crypto.SE
[ SmokeDetector ] Blacklists reloaded at rev
56b98ce
(SmokeDetector: Auto watch of walhala\W*removed
by tripleee) (running on teward/Lunar Eclipse)
7:11 AM
halflife:2019-07-22 07:11:36,227:188375: Extracted URL
https://www.cryptoexchangescript.com/smart-contract-development-company
halflife:2019-07-22 07:11:36,227:188375: cryptoexchangescript.com is blacklisted
halflife:2019-07-22 07:11:36,228:188375: cryptoexchangescript.com: ns ['mia.ns.cloudflare.com.', 'bayan.ns.cloudflare.com.']
halflife:2019-07-22 07:11:36,228:188375: cryptoexchangescript.com: ip 104.31.165.10 ()
halflife:2019-07-22 07:11:36,228:188375: cryptoexchangescript.com: ip 104.31.164.10 ()
halflife:2019-07-22 07:11:36,228:188375: URL tail smart-contract-development-company is not blacklisted or watched
halflife:2019-07-22 07:11:36,228:188375: cryptoexchangescript.com: ns ['mia.ns.cloudflare.com.', 'bayan.ns.cloudflare.com.']
halflife:2019-07-22 07:11:36,228:188375: cryptoexchangescript.com: ip 104.31.165.10 ()
halflife:2019-07-22 07:11:36,228:188375: cryptoexchangescript.com: ip 104.31.164.10 ()
halflife:2019-07-22 07:11:36,228:188375: URL tail smart-contract-development-company is not blacklisted or watched
[ SmokeDetector | MS ] Blacklisted website in body, link following arrow in body, blacklisted user (267): Blockchain Smart Contract Development Services by amara on
bitcoin.SE
[ SmokeDetector ] Blacklists reloaded at rev
19d03cf
(SmokeDetector: Auto watch of wuschools\.com
by tripleee) (running on teward/Lunar Eclipse)
halflife:2019-07-22 07:12:02,199:188376: Check post graphicdesign.stackexchange.com/questions/126862 (591)
halflife:2019-07-22 07:12:20,705:188376: Extracted URL
http://www.factsofsupplements.com/keto-fit-norway/
halflife:2019-07-22 07:12:20,706:188376: factsofsupplements.com is blacklisted
halflife:2019-07-22 07:12:20,706:188376: factsofsupplements.com: ns ['dns2.namecheaphosting.com.', 'dns1.namecheaphosting.com.']
halflife:2019-07-22 07:12:20,706:188376: factsofsupplements.com: ip 198.54.120.134 (premium54-3.web-hosting.com.)
halflife:2019-07-22 07:12:20,706:188376: URL tail keto-fit-norway is not blacklisted or watched
halflife:2019-07-22 07:12:20,706:188376: factsofsupplements.com: ns ['dns2.namecheaphosting.com.', 'dns1.namecheaphosting.com.']
halflife:2019-07-22 07:12:20,706:188376: factsofsupplements.com: ip 198.54.120.134 (premium54-3.web-hosting.com.)
halflife:2019-07-22 07:12:20,706:188376: URL tail keto-fit-norway is not blacklisted or watched
[ SmokeDetector | MS ] Bad ip for hostname in body, bad keyword in body, blacklisted website in body, body starts with title and ends in url, +4 more (591): This item is the indispensable structure of normal and home grown fixings. Every one of these fixings by calloopo on
graphicdesign.SE
halflife:2019-07-22 07:19:10,971:188377: Extracted possible phone number 232249101
halflife:2019-07-22 07:19:10,971:188377: Extracted possible phone number 20190722071616
halflife:2019-07-22 07:19:10,971:188377: Extracted possible phone number 20190722071616
halflife:2019-07-22 07:19:15,108:188377: Extracted URL
https://wetransfer.com/downloads/34702a296b9cea6c232249101aa5d18f20190722071616/7f0dab
halflife:2019-07-22 07:19:15,108:188377: wetransfer.com is not blacklisted or watched
halflife:2019-07-22 07:19:15,108:188377: wetransfer.com: ns ['ns-381.awsdns-47.com.', 'ns-616.awsdns-13.net.', 'ns-1495.awsdns-58.org.', 'ns-1743.awsdns-25.co.uk.']
halflife:2019-07-22 07:19:15,108:188377: wetransfer.com: ip 34.250.60.64 (ec2-34-250-60-64.eu-west-1.compute.amazonaws.com.)
halflife:2019-07-22 07:19:15,108:188377: wetransfer.com: ns ['ns-381.awsdns-47.com.', 'ns-616.awsdns-13.net.', 'ns-1495.awsdns-58.org.', 'ns-1743.awsdns-25.co.uk.']
halflife:2019-07-22 07:19:15,108:188377: wetransfer.com: ip 34.250.60.64 (ec2-34-250-60-64.eu-west-1.compute.amazonaws.com.)
halflife:2019-07-22 07:19:15,109:188377: wetransfer.com: ip 52.208.112.38 (ec2-52-208-112-38.eu-west-1.compute.amazonaws.com.)
halflife:2019-07-22 07:19:15,109:188377: wetransfer.com: ip 63.32.151.146 (ec2-63-32-151-146.eu-west-1.compute.amazonaws.com.)
halflife:2019-07-22 07:19:15,109:188377: wetransfer.com: 0/2 over 258 days, 21:03:12
halflife:2019-07-22 07:19:15,109:188377: wetransfer.com: ip 63.32.151.146 (ec2-63-32-151-146.eu-west-1.compute.amazonaws.com.)
halflife:2019-07-22 07:19:15,109:188377: wetransfer.com: 0/2 over 258 days, 21:03:12
[ SmokeDetector | MS ] Bad ip for hostname in body, bad ip for hostname in title, bad keyword in body, blacklisted website in body, blacklisted website in title, +5 more (793): it shut, and you truly are finishedwww.newsletter4health.com/ultimate-cbd-labs/ by user1065757 on
superuser.com
7:21 AM
halflife:2019-07-22 07:21:12,980:188378: newsletter4health.com is blacklisted
halflife:2019-07-22 07:21:12,980:188378: newsletter4health.com: ns ['dns2.namecheaphosting.com.', 'dns1.namecheaphosting.com.']
halflife:2019-07-22 07:21:12,980:188378: newsletter4health.com: ip 198.54.116.110 (server225-4.web-hosting.com.)
halflife:2019-07-22 07:21:12,980:188378: URL tail ultimate-cbd-labs is not blacklisted or watched
halflife:2019-07-22 07:21:12,980:188378: newsletter4health.com: ns ['dns2.namecheaphosting.com.', 'dns1.namecheaphosting.com.']
halflife:2019-07-22 07:21:12,980:188378: newsletter4health.com: ip 198.54.116.110 (server225-4.web-hosting.com.)
halflife:2019-07-22 07:21:12,980:188378: URL tail ultimate-cbd-labs is not blacklisted or watched
[ SmokeDetector ] Blacklists reloaded at rev
187f2ae
(SmokeDetector: Auto watch of post\.php\?post_id=77
by Makyen) (running on teward/Lunar Eclipse)
[ SmokeDetector | MS ] Blacklisted website in answer, link at end of answer, potentially bad asn for hostname in answer (153): How can I configure IMAP email accounts in Outlook with just a PST file? by faramondsmith on
superuser.com
halflife:2019-07-22 07:25:45,419:188379: osttopstapp.com is blacklisted
halflife:2019-07-22 07:25:45,419:188379: osttopstapp.com: ns ['ns2.zonode.com.', 'ns3.zonode.com.', 'ns4.zonode.com.', 'ns1.zonode.com.']
halflife:2019-07-22 07:25:45,419:188379: osttopstapp.com: ip 64.32.25.210 (lax01.dnspool.net.)
halflife:2019-07-22 07:25:45,419:188379: osttopstapp.com: ip 64.32.25.210 AS 46844 (ST-BGP - Sharktech, US/US)
halflife:2019-07-22 07:25:45,419:188379: osttopstapp.com: ns ['ns2.zonode.com.', 'ns3.zonode.com.', 'ns4.zonode.com.', 'ns1.zonode.com.']
halflife:2019-07-22 07:25:45,419:188379: osttopstapp.com: ip 64.32.25.210 (lax01.dnspool.net.)
halflife:2019-07-22 07:25:45,419:188379: osttopstapp.com: ip 64.32.25.210 AS 46844 (ST-BGP - Sharktech, US/US)
[ SmokeDetector ] Blacklists reloaded at rev
10d7d57
(SmokeDetector: Auto unwatch of walhala\W*removed
by tripleee) (running on teward/Lunar Eclipse)
[ SmokeDetector ] Blacklists reloaded at rev
83f677b
(SmokeDetector: Auto watch of walhala
by tripleee) (running on teward/Lunar Eclipse)
7:32 AM
[ SmokeDetector | MS ] Bad keyword in answer, potentially bad ns for domain in answer, potentially bad keyword in answer (88): Traversing a Graph polynomial time by rabiabatool on
cs.SE
halflife:2019-07-22 07:32:27,904:188381: ketohour.com is not blacklisted or watched
halflife:2019-07-22 07:32:27,904:188381: ketohour.com: ns ['dns2.namecheaphosting.com.', 'dns1.namecheaphosting.com.']
halflife:2019-07-22 07:32:27,904:188381: ketohour.com: ip 198.187.31.245 (premium75-5.web-hosting.com.)
halflife:2019-07-22 07:32:27,904:188381: ketohour.com: first hit
halflife:2019-07-22 07:32:27,904:188381: ketohour.com: ns ['dns2.namecheaphosting.com.', 'dns1.namecheaphosting.com.']
halflife:2019-07-22 07:32:27,904:188381: ketohour.com: ip 198.187.31.245 (premium75-5.web-hosting.com.)
halflife:2019-07-22 07:32:27,904:188381: ketohour.com: first hit
[ SmokeDetector ] Blacklists reloaded at rev
f37cd49
(SmokeDetector: Auto watch of ketohour\.com
by tripleee) (running on teward/Lunar Eclipse)
[ SmokeDetector | MS ] Blacklisted website in answer, pattern-matching website in answer (171): Add a printer in WIndows 7 produces a hidden printer ✏️ by canon printer error 5200 on
superuser.com
7:42 AM
halflife:2019-07-22 07:42:11,862:188382: Extracted URL
https://www.canonsupportnumber.org/how-to-resolve-canon-printer-error-5200
halflife:2019-07-22 07:42:11,984:188382: canonsupportnumber.org is blacklisted
halflife:2019-07-22 07:42:11,985:188382: canonsupportnumber.org: ns ['ns47.domaincontrol.com.', 'ns48.domaincontrol.com.']
halflife:2019-07-22 07:42:11,985:188382: canonsupportnumber.org: ip 107.180.51.107 (ip-107-180-51-107.ip.secureserver.net.)
halflife:2019-07-22 07:42:11,985:188382: URL tail how-to-resolve-canon-printer-error-5200 is not blacklisted or watched
halflife:2019-07-22 07:42:11,985:188382: canonsupportnumber.org: ns ['ns47.domaincontrol.com.', 'ns48.domaincontrol.com.']
halflife:2019-07-22 07:42:11,985:188382: canonsupportnumber.org: ip 107.180.51.107 (ip-107-180-51-107.ip.secureserver.net.)
halflife:2019-07-22 07:42:11,985:188382: URL tail how-to-resolve-canon-printer-error-5200 is not blacklisted or watched
[ SmokeDetector | MS ] Url in title, blacklisted website in body, body starts with title and ends in url, potentially bad keyword in body, potentially bad keyword in title (295): wonderfullketo.over-blog.com/wonderfullketo by Prour turce on
ham.SE
[ SmokeDetector | MS ] Potentially bad keyword in answer (1): How am I supposed to make money? by Cade on
gaming.SE
[ SmokeDetector | MS ] Body starts with title and ends in url, link at end of body, potentially bad ns for domain in body, potentially bad keyword in body, potentially bad keyword in username (200): After many investigations, Alan Aragon's researchers have designed three high-quality power meals by mint02ch on
meta.SE
halflife:2019-07-22 07:47:07,111:188383: wawokumaj.wixsite.com: ip 185.230.62.169 ()
halflife:2019-07-22 07:47:07,112:188383: wawokumaj.wixsite.com: ip 185.230.62.169 AS 58182 (WIX_COM, IL/IL)
halflife:2019-07-22 07:47:07,112:188383: URL tail wonderfullketo is matched (watched or blacklisted)
halflife:2019-07-22 07:47:07,112:188383: wawokumaj.wixsite.com: first hit
halflife:2019-07-22 07:47:07,112:188383: wawokumaj.wixsite.com: ip 185.230.62.169 AS 58182 (WIX_COM, IL/IL)
halflife:2019-07-22 07:47:07,112:188383: URL tail wonderfullketo is matched (watched or blacklisted)
halflife:2019-07-22 07:47:07,112:188383: wawokumaj.wixsite.com: first hit
[ SmokeDetector ] Blacklists reloaded at rev
4392851
(SmokeDetector: Auto watch of inbox\W?dollars
by tripleee) (running on teward/Lunar Eclipse)
[ SmokeDetector ] Blacklists reloaded at rev
4fac4e1
(SmokeDetector: Auto watch of vindale\W?research
by tripleee) (running on teward/Lunar Eclipse)
[ SmokeDetector ] Blacklists reloaded at rev
4a5a1a3
(SmokeDetector: Auto watch of pinecone\W?research
by tripleee) (running on teward/Lunar Eclipse)
[ SmokeDetector ] Blacklists reloaded at rev
dca0f73
(SmokeDetector: Auto watch of time\W?bucks
by tripleee) (running on teward/Lunar Eclipse)
[ SmokeDetector ] Blacklists reloaded at rev
2a64553
(SmokeDetector: Auto watch of swag\W?bucks
by tripleee) (running on teward/Lunar Eclipse)
[ SmokeDetector | MS ] Potentially problematic ns configuration in answer, username similar to website in answer (58): Does it make a difference if your URL path ends in a trailing slash or not? by bscriptsource on
webmasters.SE
halflife:2019-07-22 07:54:15,888:188386: bscriptsource.com is not blacklisted or watched
halflife:2019-07-22 07:54:15,888:188386: bscriptsource.com: ns ['ns1.bh-49.webhostbox.net.', 'ns2.bh-49.webhostbox.net.']
halflife:2019-07-22 07:54:15,888:188386: bscriptsource.com: ip 209.99.16.16 (16.0/24.16.99.209.in-addr.arpa.)
halflife:2019-07-22 07:54:15,888:188386: bscriptsource.com: ip 209.99.16.16 AS 3900 (TEXASNET-ASN - YHC Corporation, US/US)
halflife:2019-07-22 07:54:15,888:188386: bscriptsource.com: ns ['ns1.bh-49.webhostbox.net.', 'ns2.bh-49.webhostbox.net.']
halflife:2019-07-22 07:54:15,888:188386: bscriptsource.com: ip 209.99.16.16 (16.0/24.16.99.209.in-addr.arpa.)
halflife:2019-07-22 07:54:15,888:188386: bscriptsource.com: ip 209.99.16.16 AS 3900 (TEXASNET-ASN - YHC Corporation, US/US)
7:54 AM
[ SmokeDetector ] Blacklists reloaded at rev
2a64553
(SmokeDetector: Auto watch of swag\W?bucks
by tripleee) (running on teward/Lunar Eclipse)
[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, blacklisted website in body, pattern-matching product name in body, pattern-matching product name in title, +3 more (495): Life Nutra Keto by peterrfrancis on
superuser.com
halflife:2019-07-22 07:56:50,695:188387: Extracted URL
https://www.townscript.com/e/life-nutra-keto-013200
halflife:2019-07-22 07:56:50,695:188387: townscript.com is blacklisted
halflife:2019-07-22 07:56:50,695:188387: townscript.com: ns ['ns75.domaincontrol.com.', 'ns76.domaincontrol.com.']
halflife:2019-07-22 07:56:50,695:188387: townscript.com: ip 52.66.106.63 (ec2-52-66-106-63.ap-south-1.compute.amazonaws.com.)
halflife:2019-07-22 07:56:50,695:188387: townscript.com: ns ['ns75.domaincontrol.com.', 'ns76.domaincontrol.com.']
halflife:2019-07-22 07:56:50,695:188387: townscript.com: ip 52.66.106.63 (ec2-52-66-106-63.ap-south-1.compute.amazonaws.com.)
halflife:2019-07-22 07:56:50,695:188387: Extracted URL
http://www.letsfindtoday.com/life-nutra-keto/
halflife:2019-07-22 07:56:50,695:188387: letsfindtoday.com is watched
halflife:2019-07-22 07:56:50,695:188387: letsfindtoday.com: ns ['dns1.namecheaphosting.com.', 'dns2.namecheaphosting.com.']
halflife:2019-07-22 07:56:50,695:188387: letsfindtoday.com: ip 198.54.126.94 (server36-2.web-hosting.com.)
halflife:2019-07-22 07:56:50,695:188387: URL tail life-nutra-keto is matched in /life-nutra-keto/
halflife:2019-07-22 07:56:50,696:188387: letsfindtoday.com: 5/6 over 24 days, 19:16:59
halflife:2019-07-22 07:56:50,695:188387: letsfindtoday.com: ns ['dns1.namecheaphosting.com.', 'dns2.namecheaphosting.com.']
halflife:2019-07-22 07:56:50,695:188387: letsfindtoday.com: ip 198.54.126.94 (server36-2.web-hosting.com.)
halflife:2019-07-22 07:56:50,695:188387: URL tail life-nutra-keto is matched in /life-nutra-keto/
halflife:2019-07-22 07:56:50,696:188387: letsfindtoday.com: 5/6 over 24 days, 19:16:59
halflife:2019-07-22 07:56:50,696:188387: Extracted URL
https://www.youtube.com/watch?v=M89ASsqyQZs&feature=youtu.be
halflife:2019-07-22 07:56:50,696:188387: dailymotion.com is not blacklisted or watched
halflife:2019-07-22 07:56:50,696:188387: dailymotion.com: ns ['b.dailymotion.com.', 'a.dailymotion.com.']
halflife:2019-07-22 07:56:50,696:188387: dailymotion.com: ip 195.8.215.136 (www.dailymotion.com.)
halflife:2019-07-22 07:56:50,696:188387: dailymotion.com: ip 195.8.215.136 AS 41690 (DAILYMOTION For peering related business, please mail peering@dailymotion.com, FR/FR)
halflife:2019-07-22 07:56:50,696:188387: dailymotion.com: ns ['b.dailymotion.com.', 'a.dailymotion.com.']
halflife:2019-07-22 07:56:50,696:188387: dailymotion.com: ip 195.8.215.136 (www.dailymotion.com.)
halflife:2019-07-22 07:56:50,696:188387: dailymotion.com: ip 195.8.215.136 AS 41690 (DAILYMOTION For peering related business, please mail peering@dailymotion.com, FR/FR)
« first day (668 days earlier) ← previous day next day → last day (1750 days later) »