If you value the safety of your account, you will obey and heed the following advice:
1) For the duration of the 'Equinox 2017' event, choose ONE city/area to spoof. DO NOT spoof anywhere else. Furthermore, load up your spoofing app/program BEFORE loading up Pokémon Go.
2) If your spoofing location is not your local area, DO NOT load up Pokémon Go under ANY circumstances without spoofing to the area you have chosen.
3) DO NOT USE ANY BOT.
If someone claims a bot is safe, they are wrong, or they are outright lying to you. Do not pay for ANY bot.
4) Do not purchase an account from anyone. Every account that is for sale has a high possibility that the account has been silent-flagged server-side. This means that the account will be rendered completely useless in the future.
5) Do not capture pokemon from a large distance apart within a 24-hour period.
6) Do not use 'route-walkers', a.k.a. automated programs inside your spoofing apps for egg-hatching.
My source has confirmed that if Niantic suspects your account, they are looking for duplicate GPS coordinates. Route-walkers will be apparent to even the most inept staffer.
7) Do not use any program to help you catch Pokémon. This includes programs like 'touch-assist'. Niantic are experimenting with catch-screen-checks server-side where they will see exactly what touch pattern you did. Touch-assists will be identical, and will raise a red-flag.
Your accounts are currently at the most-risk they've been in Niantic's history.
Heed the above advice, and don't do anything stupid.