12:01 PM
halflife:2021-03-04 12:06:27,983:294923: shahzifpc.com: ns ['denver.ns.cloudflare.com.', 'evelyn.ns.cloudflare.com.']
@Yatin Matched by
cracks\w{3}(?<!(?:mak|mox|waz|fab|war|all|kit|cam|ray|oul))\.com(?# campaign repeatedly adding new domains in this format, minus the ones we know already)
on line 27082 of watched_keywords.txt
12:12 PM
halflife:2021-03-04 12:12:05,896:294926: Check post https://economics.stackexchange.com/questions/42882 (42)
halflife:2021-03-04 12:12:11,705:294926: bis.org: ns ['joel.ns.cloudflare.com.', 'mira.ns.cloudflare.com.']
halflife:2021-03-04 12:15:18,889:294927: Extracted URL
https://mbbsadmissioninrussia.in/ulyanovsk-state-university/
12:16 PM
halflife:2021-03-04 12:17:54,478:294928: URL tail ulyanovsk-state-university is not blacklisted or watched
thresholdhalflife:2021-03-04 12:17:54,478:294928: mbbsadmissioninrussia.in: 4/5 over 21 days, 3:37:09
12:21 PM
halflife:2021-03-04 12:21:08,210:294929: Check post https://stackoverflow.com/questions/66474918 (1)
halflife:2021-03-04 12:21:28,134:Visited URL at 2021-03-04 12:15:15.741975; returning cached result for
https://mbbsadmissioninrussia.in/ulyanovsk-state-university/
@Yatin
halflife:2021-03-04 12:21:33,086:294930: URL tail ulyanovsk-state-university is not blacklisted or watched
halflife:2021-03-04 12:21:48,962:294931: Check post https://stackoverflow.com/questions/66474928 (1)
halflife:2021-03-04 12:22:01,449:294931: Extracted URL
https://influencers.club/?utm_source=stackoverflow.com
halflife:2021-03-04 12:22:01,450:294931: influencers.club: ns ['ns-cloud-e2.googledomains.com.', 'ns-cloud-e3.googledomains.com.', 'ns-cloud-e4.googledomains.com.', 'ns-cloud-e1.googledomains.com.']
halflife:2021-03-04 12:22:01,450:294931: influencers.club: ip 157.230.137.115 (instagraminfluencers.club.)
halflife:2021-03-04 12:22:01,450:294931: URL tail ?utm_source=stackoverflow.com is not blacklisted or watched
halflife:2021-03-04 12:24:10,360:Visited URL at 2021-03-04 12:15:15.741975; returning cached result for
https://mbbsadmissioninrussia.in/ulyanovsk-state-university/
@Yatin
halflife:2021-03-04 12:24:15,561:294932: Extracted URL
https://mbbsadmissioninrussia.in/ulyanovsk-state-university/
@Yatin
halflife:2021-03-04 12:24:15,562:294932: URL tail ulyanovsk-state-university is not blacklisted or watched
halflife:2021-03-04 12:25:27,199:294933: Check post https://stackoverflow.com/questions/66474968 (1)
halflife:2021-03-04 12:25:46,970:294933: forums.kali.org: ip 192.124.249.12 (cloudproxy10012.sucuri.net.)
halflife:2021-03-04 12:25:46,970:294933: forums.kali.org: ip 192.124.249.12 AS 30148 (SUCURI-SEC, US/US)
halflife:2021-03-04 12:25:46,971:294933: kali.org: ns ['ns-88-b.gandi.net.', 'ns-150-a.gandi.net.', 'ns-10-c.gandi.net.']
halflife:2021-03-04 12:25:47,049:294933: bugs.kali.org: ip 192.124.249.169 (cloudproxy10169.sucuri.net.)
halflife:2021-03-04 12:25:49,138:294934: Check post https://apple.stackexchange.com/questions/414938 (391)
@Yatin 'https://github.com/Azure-Samples/active-directory-b2c-custom-policy-starterpack/tree/master/scenarios/phone-number' is not caught by a blacklist or watchlist item.
> Url in title, pattern-matching website in body, pattern-matching website in title
----------
Pattern-matching website in body - Position 0-114: https://github.com/Azure-Samples/active-directory-b2c-custom-policy-starterpack/tree/master/scenarios/phone-number
Pattern-matching website in title - Position 0-114: https://github.com/Azure-Samples/active-directory-b2c-custom-policy-starterpack/tree/master/scenarios/phone-number
Url in title - Position 0-18: https://github.com
----------
Pattern-matching website in body - Position 0-114: https://github.com/Azure-Samples/active-directory-b2c-custom-policy-starterpack/tree/master/scenarios/phone-number
Pattern-matching website in title - Position 0-114: https://github.com/Azure-Samples/active-directory-b2c-custom-policy-starterpack/tree/master/scenarios/phone-number
Url in title - Position 0-18: https://github.com
halflife:2021-03-04 12:26:16,213:294934: Extracted URL
https://sites.google.com/view/ricksimpsoncbdoilview/home
halflife:2021-03-04 12:26:16,291:294934: Extracted URL
https://sites.google.com/view/ricksimpsoncbdoilbuy/home
halflife:2021-03-04 12:26:16,292:294934: Extracted URL
https://www.bonfire.com/store/rick-simpson-cbd-oil-view/
halflife:2021-03-04 12:26:16,292:294934: Extracted URL
https://medium.com/@Ricksimpsoncbdoil/rick-simpson-cbd-oil-consume-this-cbd-oil-everyday-for-reducing-chronic-pain-e279dc2196b3
websitehalflife:2021-03-04 12:26:16,292:294934: Extracted URL
https://ricksimpsoncbdoil.tumblr.com/post/644706207226052608/rick-simpsons-cbd-oil-has-been-proven-as-an
newdomainhalflife:2021-03-04 12:26:16,292:294934: ricksimpsoncbdoil.tumblr.com is not blacklisted or watched
websitehalflife:2021-03-04 12:26:16,292:294934: Extracted URL
https://williwarren.wixsite.com/ricksimpsoncbdoil
newdomainhalflife:2021-03-04 12:26:16,292:294934: williwarren.wixsite.com is not blacklisted or watched
halflife:2021-03-04 12:26:16,293:294934: williwarren.wixsite.com: ns ['username.wix.com.', 'a9b21bea-username.wix.com.', 'td-username-db4-63-169.wix.com.']
halflife:2021-03-04 12:26:16,293:294934: williwarren.wixsite.com: ip td-username-db4-63-169.wix.com. ()
halflife:2021-03-04 12:26:16,293:294934: Extracted URL
https://teamfeed.feedingamerica.org/index.cfm?fuseaction=donorDrive.participant&participantID=3894
newdomainhalflife:2021-03-04 12:26:16,293:294934: teamfeed.feedingamerica.org is not blacklisted or watched
halflife:2021-03-04 12:26:16,293:294934: URL tail index.cfm?fuseaction=donordrive.participant&participantid=3894 is not blacklisted or watched
halflife:2021-03-04 12:28:09,177:294935: Check post https://stackoverflow.com/questions/66475016 (96)
halflife:2021-03-04 12:38:47,125:294936: Extracted URL
https://malwareguide112.com/blog/how-to-remove-bestcaptcharesolver-com
newdomainhalflife:2021-03-04 13:01:20,898:294938: torchsearch.wordpress.com is not blacklisted or watched
halflife:2021-03-04 13:04:51,044:294939: Check post https://stackoverflow.com/questions/66475598 (58)
halflife:2021-03-04 13:09:37,617:294940: Check post https://stackoverflow.com/questions/66475689 (2)
halflife:2021-03-04 13:17:38,813:294941: Check post https://islam.stackexchange.com/questions/65613 (1)
halflife:2021-03-04 13:22:23,766:294942: taklaganja.com: ns ['ns88.hostingraja.in.', 'ns87.hostingraja.in.']
halflife:2021-03-04 13:22:23,766:294942: taklaganja.com: ip 103.83.81.17 (server38.hostingraja.org.)
halflife:2021-03-04 13:24:44,096:294943: upcodein.com: ns ['ns1.digitalocean.com.', 'ns2.digitalocean.com.', 'ns3.digitalocean.com.']
halflife:2021-03-04 13:26:50,495:294944: Check post https://stackoverflow.com/questions/66475990 (1)
halflife:2021-03-04 13:27:19,441:294946: Check post https://ai.stackexchange.com/questions/26666 (1)
halflife:2021-03-04 13:31:55,978:294946: Extracted URL
https://www.researchgate.net/publication/2737817_Replacement_Schemes_for_Transposition_Tables
halflife:2021-03-04 13:31:55,978:294946: HTTP status 429 for
https://www.researchgate.net/publication/2737817_Replacement_Schemes_for_Transposition_Tables
halflife:2021-03-04 13:31:55,979:294946: Extracted URL
http://orangehelicopter.com/academic/papers/powley_aiide17.pdf
newdomainhalflife:2021-03-04 13:31:55,979:294946: orangehelicopter.com is not blacklisted or watched
halflife:2021-03-04 13:31:55,979:294946: orangehelicopter.com: ns ['ns02.domaincontrol.com.', 'ns01.domaincontrol.com.']
halflife:2021-03-04 13:31:55,979:294946: orangehelicopter.com: ip 192.30.252.153 (lb-192-30-252-153-iad.github.com.)
halflife:2021-03-04 13:31:55,979:294946: orangehelicopter.com: ip 192.30.252.153 AS 36459 (GITHUB, US/US)
halflife:2021-03-04 13:31:55,979:294946: orangehelicopter.com: ip 192.30.252.154 (lb-192-30-252-154-iad.github.com.)
halflife:2021-03-04 13:31:55,979:294946: orangehelicopter.com: ip 192.30.252.154 AS 36459 (GITHUB, US/US)
halflife:2021-03-04 13:31:58,146:294947: Check post https://stackoverflow.com/questions/66476001 (1)
websitehalflife:2021-03-04 13:32:03,484:294947: Extracted URL
https://dsapblog.wordpress.com/2013/12/24/themis/
newdomainhalflife:2021-03-04 13:32:03,485:294947: dsapblog.wordpress.com is not blacklisted or watched
halflife:2021-03-04 13:32:05,531:294948: Check post https://stackoverflow.com/questions/66476040 (1)
halflife:2021-03-04 13:32:11,715:
https://www.aa.com
redirects to https://www.americanairlines.ie/intl/ie/index.jsp?locale=en_IE
halflife:2021-03-04 13:32:12,982:294948: aa.com: ns ['asia2.akam.net.', 'asia3.akam.net.', 'asia4.akam.net.', 'ns1-118.akam.net.', 'ns1-149.akam.net.', 'eur5.akam.net.', 'eur6.akam.net.', 'usw2.akam.net.']
halflife:2021-03-04 13:32:12,982:294948: aa.com: ip 23.195.138.125 (a23-195-138-125.deploy.static.akamaitechnologies.com.)
halflife:2021-03-04 13:39:02,061:294949: Extracted URL
http://www.jan-helbling.ch/~jhelbling/linux.py?gpl3-opensource-programm=jhSitemapgenerator-a-multithreaded-tool-to-create-sitemap.xml-from-shell
halflife:2021-03-04 13:39:02,061:294949: HTTP status 404 for
http://www.jan-helbling.ch/~jhelbling/linux.py?gpl3-opensource-programm=jhSitemapgenerator-a-multithreaded-tool-to-create-sitemap.xml-from-shell
halflife:2021-03-04 13:39:02,061:294949: jan-helbling.ch: ns ['ns.hostpoint.ch.', 'ns2.hostpoint.ch.', 'ns3.hostpoint.ch.']
halflife:2021-03-04 13:39:02,061:294949: jan-helbling.ch: ip 217.26.61.252 (sl1200.web.hostpoint.ch.)
halflife:2021-03-04 13:44:17,710:294951: Extracted URL
https://www.microteklearning.com/vendor/microsoft/sql-server/
halflife:2021-03-04 13:50:26,002:294952: Extracted URL
https://link.springer.com/chapter/10.1007/978-3-319-78503-5_5
halflife:2021-03-04 13:50:26,002:294952: link.springer.com: ns ['star.live.public.springernature.io.', 'springer2.map.fastly.net.']
halflife:2021-03-04 13:50:26,002:294952: link.springer.com: ip star.live.public.springernature.io. ()
halflife:2021-03-04 13:50:26,002:294952: Extracted URL
https://www.udemy.com/course/data-science-for-healthcare-claims-data/?referralCode=9E3B7313BD28F30080C8
halflife:2021-03-04 13:50:26,002:294952: udemy.com: ns ['anna.ns.cloudflare.com.', 'pete.ns.cloudflare.com.']
halflife:2021-03-04 13:54:16,225:294953: Check post https://stackoverflow.com/questions/66476442 (93)
halflife:2021-03-04 13:54:16,306:294953: Extracted URL
https://play.google.com/store/apps/details?id=com.CoolDog.HisNameEnglish
halflife:2021-03-04 13:56:10,410:294954: Extracted URL
https://hyalurolift.fr/male-power-plus-male-enhancement-pro/
halflife:2021-03-04 13:56:10,410:294954: Wordpress promotion URL
https://click2offer.xyz/recommends/truvalast-male/
redirects to https://truvalastformula.com/575/2077/?AFID=2077-2028&SID=1371480&C1=61445481&C3=40536374
halflife:2021-03-04 13:56:14,090:294954: truvalastformula.com: ns ['naomi.ns.cloudflare.com.', 'damon.ns.cloudflare.com.']
halflife:2021-03-04 13:56:14,091:294954: hyalurolift.fr: ns ['dns2.namecheaphosting.com.', 'dns1.namecheaphosting.com.']
halflife:2021-03-04 13:56:14,091:294954: hyalurolift.fr: ip 198.54.120.132 (premium54-2.web-hosting.com.)
halflife:2021-03-04 14:06:02,847:Visited URL at 2021-03-04 13:50:14.276853; returning cached result for
https://www.udemy.com/course/data-science-for-healthcare-claims-data/?referralCode=9E3B7313BD28F30080C8
halflife:2021-03-04 14:06:10,622:294955: Extracted URL
https://www.udemy.com/course/data-science-for-healthcare-claims-data/?referralCode=9E3B7313BD28F30080C8
halflife:2021-03-04 14:06:47,600:294956: Check post https://stackoverflow.com/questions/66476671 (1)
halflife:2021-03-04 14:15:28,627:294957: Extracted URL
https://forum.xda-developers.com/t/guide-build-mod-avd-kernel-android-10-11-rootavd-magisk-usb-passthrough-linux-google-play-store-api.4212719/
halflife:2021-03-04 14:18:33,785:294958: Check post https://stackoverflow.com/questions/66476853 (1)
halflife:2021-03-04 14:18:49,025:294958: mongoosejs.com: ns ['ns1.automattic.com.', 'ns2.automattic.com.', 'ns3.automattic.com.']
halflife:2021-03-04 14:18:49,025:294958: mongoosejs.com: ip 185.199.108.153 (cdn-185-199-108-153.github.com.)
halflife:2021-03-04 14:18:49,025:294958: mongoosejs.com: ip 185.199.111.153 (cdn-185-199-111-153.github.com.)
halflife:2021-03-04 14:18:49,025:294958: mongoosejs.com: ip 185.199.109.153 (cdn-185-199-109-153.github.com.)
2:33 PM
halflife:2021-03-04 14:34:03,306:294959: ajanabha.com: ns ['leonidas.ns.cloudflare.com.', 'izabella.ns.cloudflare.com.']
halflife:2021-03-04 14:36:00,100:294960: Check post https://stackoverflow.com/questions/66477171 (97)
newdomainhalflife:2021-03-04 14:36:04,149:294960: swimmingpoolslides.net is not blacklisted or watched
halflife:2021-03-04 14:36:04,149:294960: swimmingpoolslides.net: ns ['yns1.yahoo.com.', 'yns2.yahoo.com.']
2:46 PM
halflife:2021-03-04 14:46:49,672:294961: Check post https://money.stackexchange.com/questions/137265 (2)
halflife:2021-03-04 14:58:41,718:294963: Check post https://wordpress.stackexchange.com/questions/384063 (261)
halflife:2021-03-04 15:03:27,862:294964: Check post https://datascience.stackexchange.com/a/90255 (80)
halflife:2021-03-04 15:11:18,234:294965: Check post https://stackoverflow.com/questions/66477817 (1)
halflife:2021-03-04 15:12:40,813:294966: Check post https://datascience.stackexchange.com/questions/90250 (93)
halflife:2021-03-04 15:18:59,260:
https://www.photobox.co.uk/my/photo/full?photo_id=503800843618
redirects to https://www.photobox.co.uk/
halflife:2021-03-04 15:19:00,322:
https://www.photobox.co.uk/my/photo/full?photo_id=503800846324
redirects to https://www.photobox.co.uk/
halflife:2021-03-04 15:19:04,380:294967: Extracted URL
https://www.photobox.co.uk/my/photo/full?photo_id=503800843618
halflife:2021-03-04 15:19:04,380:294967: Extracted URL
https://www.photobox.co.uk/my/photo/full?photo_id=503800846324
halflife:2021-03-04 15:28:13,031:294968: Check post https://diy.stackexchange.com/questions/217828 (15)
msapi:2021-03-04 15:31:02,495:No results for posts/294969 (result: {'items': [], 'has_more': False})
msapi:2021-03-04 15:33:32,963:No results for posts/294970 (result: {'items': [], 'has_more': False})
halflife:2021-03-04 15:34:34,951:294971: Extracted URL
https://islamqa.info/en/answers/2006/a-woman-refusing-to-have-intercourse-with-her-husband
halflife:2021-03-04 15:34:34,951:294971: islamqa.info: ns ['chuck.ns.cloudflare.com.', 'heather.ns.cloudflare.com.']
halflife:2021-03-04 15:38:07,758:294972: Check post https://stackoverflow.com/questions/66478259 (1)
halflife:2021-03-04 15:38:11,482:Domain perfectparadox8400.000webhostapp.com not extracted by metasmoke
halflife:2021-03-04 15:38:11,482:294972: Extracted URL
https://perfectparadox8400.000webhostapp.com/
newdomainhalflife:2021-03-04 15:38:11,482:294972: perfectparadox8400.000webhostapp.com is not blacklisted or watched
halflife:2021-03-04 15:38:11,482:294972: perfectparadox8400.000webhostapp.com: ns ['us-east-1.route-1.000webhost.awex.io.', 'dns1.000webhost.com.', 'dns2.000webhost.com.']
halflife:2021-03-04 15:38:11,482:294972: perfectparadox8400.000webhostapp.com: ip 145.14.145.92 AS 204915 (AWEX, CY/CY)
halflife:2021-03-04 15:38:11,483:294972: perfectparadox8400.000webhostapp.com: ip us-east-1.route-1.000webhost.awex.io. ()
halflife:2021-03-04 15:38:11,483:294972: perfectparadox8400.000webhostapp.com: ip us-east-1.route-1.000webhost.awex.io. AS 204915 (AWEX, CY/CY)
halflife:2021-03-04 15:41:47,268:294973: simtest.it: ns ['ns7.simtest.it.', 'ns3.simtest.it.', 'ns4.simtest.it.']
msapi:2021-03-04 15:48:48,545:No results for posts/294974 (result: {'items': [], 'has_more': False})
halflife:2021-03-04 15:54:44,925:294975: Check post https://stackoverflow.com/questions/66478531 (42)
halflife:2021-03-04 15:58:47,814:294977: Check post https://stackoverflow.com/questions/66478591 (44)
halflife:2021-03-04 15:59:12,031:Failed to fetch URL
https://www.certssolution.com/cisco/200-401-dumps
(ConnectTimeout(MaxRetryError("HTTPSConnectionPool(host='www.certssolution.com', port=443): Max retries exceeded with url: /cisco/200-401-dumps (Caused by ConnectTimeoutError(<urllib3.connection.HTTPSConnection object at 0x7f3122714d30>, 'Connection to www.certssolution.com timed out. (connect timeout=20)'))")))
halflife:2021-03-04 15:59:12,031:Failed to fetch
https://www.certssolution.com/cisco/200-401-dumps
(FetchError("HTTPSConnectionPool(host='www.certssolution.com', port=443): Max retries exceeded with url: /cisco/200-401-dumps (Caused by ConnectTimeoutError(<urllib3.connection.HTTPSConnection object at 0x7f3122714d30>, 'Connection to www.certssolution.com timed out. (connect timeout=20)'))"))
halflife:2021-03-04 15:59:14,489:294977: Extracted URL
https://www.certssolution.com/cisco/200-401-dumps
halflife:2021-03-04 15:59:14,490:294977: certssolution.com: ns ['ns1-bingo.vivawebhost.com.', 'ns2-bingo.vivawebhost.com.']
halflife:2021-03-04 15:59:14,490:294977: certssolution.com: ip 174.136.29.165 (bingo.vivawebhost.com.)
« first day (1259 days earlier) ← previous day next day → last day (1146 days later) »