Received: from mail-wm0-f52.google.com (mail-wm0-f52.google.com [74.125.82.52]) by anna.lesderid.net (Postfix) with ESMTP id 894A1D1911 for ; Fri, 15 Jul 2016 09:52:02 +0200 (CEST) Received: by mail-wm0-f52.google.com with SMTP id f65so15299628wmi.0 for ; Fri, 15 Jul 2016 00:52:01 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rightside.co; s=google; h=mime-version:in-reply-to:references:from:date:message-id:subject:to; bh=/PmUvG0igoWdk+LElYWV0Ho3f/IdkiL6JhgIHp3UESk=; b=G/G0sHkcJIG5tb/mi2c9iHAWLPRL5Zo1oFWD5qlxMmzgkp7L0U79TN14Pldw81wF50 4Cj2DNcp8ui5nfdgxctjwxSj7BvpzTlAd4P4v5MGT63D32C+K5bjysiW2MvgSdkZErKC vt0rS6Gn+BRhTSzx/i3y5CVbb6CQciXer7wqo= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to; bh=/PmUvG0igoWdk+LElYWV0Ho3f/IdkiL6JhgIHp3UESk=; b=IdKsQkQnmziEJFMos0cYXaPAtfxgNxOaZ5cud0ANQndA3BCdDeAMW+B+3sVtF7olZE jRXMh36uE2PDEGJpOpqszKQfRJYDwjQveGlMqRB/Lp9l1dk/tmI6GUB9nNFfdt/yI7tN RrG8+GaNciq8BvPVen/aJYJ7e/glSFTtaWyl+ov3XQ/QGvFha2clI6XohjN0LrihEA2W HDRfEWzpp2vcu1jstNM5O00KUjAmHRSBxz6+IpEhW9Fjd2MDLIZRs7bGfeiYyiuzChkH YWCUSQbJ7DlPcOoZPZtpnWvkAmuWuJwsYTgSzb11haNoIlRi28hV1kHJHD+kzKJrHylv Guyg== X-Gm-Message-State: ALyK8tK/NMh8jEEWoag3WgJng5SzpSIFbmrCf0k2dGyWIkEFBCyd0RgwhqEC9uKqmzOHEKgegTW/h6IhWDF9wBWI X-Received: by 10.28.132.149 with SMTP id g143mr40037701wmd.100.1468569120164; Fri, 15 Jul 2016 00:52:00 -0700 (PDT) MIME-Version: 1.0 Received: by 10.28.139.135 with HTTP; Fri, 15 Jul 2016 00:51:40 -0700 (PDT) In-Reply-To: References: From: Registry Abuse Date: Fri, 15 Jul 2016 08:51:40 +0100 Message-ID: Subject: Re: serverHold status of cocaine.ninja To: Les Content-Type: multipart/alternative; boundary=001a11444dacbc78740537a7e4af --001a11444dacbc78740537a7e4af Content-Type: text/plain; charset=UTF-8 Dear Les, The passphrase you require is : REDACTED Kind regards, Alan On 15 July 2016 at 00:28, Les wrote: > Hi > > Thank you for the reply. I'm glad you understand and will handle it in > a better way in the future. > > I have investigated the following files and removed them: > http://a.cocaine.ninja/uiabmx.006 > http://a.cocaine.ninja/pyukki.005 > http://a.cocaine.ninja/szciav.004 > http://a.cocaine.ninja/swytuv.003 > http://a.cocaine.ninja/pqwmfr.002 > http://a.cocaine.ninja/kjkxdy.001 > > This leaves these two files: > https://a.cocaine.ninja/REDACTED > https://a.cocaine.ninja/REDACTED > > These two files are encrypted, making it impossible for me to check the > nature of their contents without the passphrase. Since asking me to > remove encrypted files without providing me with the passphrase would > be an effective way to censor the file host, I'm afraid I can't remove > them. If you, or the IWF, has the passphrase, please send it to me so I > can investigate it further. If that's not possible, I hope you > understand I can't remove them. > > Again, thank you for restoring the domain's status. > > Kind regards > > Les De Ridder > > On Fri, 15 Jul 2016 at 00:40 Registry Abuse > wrote: > >> Dear Les, >> >> Many thanks for your communication, and we do certainly empathize with >> the situation. Please understand that reported instances of Child sexual >> abuse material are considered to of the utmost urgency and must be >> mitigated to ensure access to such material is immediately restricted to >> prevent the further harm and re-victimisation. To ensure that this matter >> can be resolved as a matter of priority the following files are those which >> have been reported as compromised. >> >> http://a.cocaine.ninja/uiabmx.006 >> http://a.cocaine.ninja/pyukki.005 >> http://a.cocaine.ninja/szciav.004 >> http://a.cocaine.ninja/swytuv.003 >> http://a.cocaine.ninja/pqwmfr.002 >> http://a.cocaine.ninja/kjkxdy.001 >> https://a.cocaine.ninja/REDACTED >> https://a.cocaine.ninja/REDACTED >> https://a.cocaine.ninja/REDACTED >> https://a.cocaine.ninja/REDACTED >> >> >> *Given the nature of the service on Cocaine.ninja, I am removing the >> serverhold for domain, effective immediately, on the understanding that the >> referenced files are investigated and the matter remediated without delay.* I >> would further ask that you confirm within 24 hours that this matter has >> been remediated. If no such confirmation has been received, we do reserve >> the right to suspend the domain again. >> >> Again we understand the difficulties that may be experienced in maintain >> such a file hosting service; however, it is not for the registry to advise >> on how to deal with abuse within your service. We can but remind that the >> Registry does maintain an acceptable use policy (AUP) relating to the use >> of our TLDs and it is up to the registrant to ensure compliance with the >> terms of this AUP. That being noted, Rightside does not wish to >> unnecessarily interfere with the enjoyment of the domain and we are happy >> to work with our registrants to ensure such difficulties are not >> experienced again. As such, for future reference, the registry has noted >> the nature of the service being provided in connection with the domain >> cocaine.ninja, and shall approach any reported issues of abuse for this >> domain in a manner appropriate to the in service you provide (i.e. prior >> to any such future registry actions occurring, we shall endeavour to ensure >> that both your registrar and your abuse notification address are provided >> with notice and a reasonable opportunity to address the issue.) >> >> We thank you for you understanding in this matter, >> >> Kind regards, >> >> Alan Woods >> Registry Compliance Manager >> >> >> >> >> On 14 July 2016 at 18:59, Les wrote: >> >>> Hello >>> >>> I'm the registrant of cocaine.ninja. Today I noticed my domain name >>> status was changed to 'serverHold'. I contacted my registrar, >>> namecheap, and they told me that cocaine.ninja is confirmed by the >>> Internet Watch Foundation (IWF) as being associated with child abuse >>> imagery. >>> >>> On cocaine.ninja, I host a public file host. I most certainly don't >>> condone illegal content, such as child abuse content or copyrighted >>> content, being uploaded. The FAQ, which is required reading material >>> for all uploaders, says the following: "No Child porn, anything else >>> goes until I get a lawsuit I guess.". This may not be sufficient, so I >>> will replace it with "No child abuse content, malware, or other content >>> that is illegal in France and/or the United Kingdom". >>> >>> Furthermore, there is an abuse contact (abuse@cocaine.ninja) on the >>> front page. E-mails sent to this address are checked and dealt with >>> promptly, usually within 8 hours, since I'm the only person who has >>> access to the server and the abuse mailbox. In case illegal content is >>> confirmed, the files are deleted from the server and all backups, and a >>> transparency report is created. You can find earlier transparency >>> reports at https://fuwafuwa.moe/transparency/cocaine.ninja/. >>> >>> Since my service is privacy oriented, which is one of the reasons I >>> don't log connections or uploads, it's more likely to be a target of >>> illegal uploads than other file hosts. There is sadly nothing I can do >>> about that other than closely monitoring the abuse mailbox. As a >>> service provider with a large amount of uploaded content and users, >>> it's not possible to check each and every file for illegal content. Any >>> suggestions on how to handle this problem would be very much >>> appreciated. >>> >>> The goal of cocaine.ninja is to be a platform that allows anyone to >>> upload their files while staying anonymous and being protected from >>> government surveillance. It is not a platform for illegal content. >>> >>> I hope this matter can be resolved ASAP. >>> >>> Kind regards >>> >>> Les De Ridder >>> >> >> --001a11444dacbc78740537a7e4af