MIME-Version: 1.0
In-Reply-To: <CALx8yCwPhdUO5nLuD=X00gkNAkgLBjDt5T8p9WXEzBWq6OAoEQ@mail.gmail.com>
References: <CALx8yCx78YX3P2=Zo8JxRyHkU_saYjeiCiWMmfXOhbPqTTH=oA@mail.gmail.com>
 <CALF4ZcBnLA1+TKYhZ9mWcj6-9_=PENcwtuhmFXM5kHQCy_WYWQ@mail.gmail.com>
 <CALx8yCy1LTCU=pSnz0BQHAPHMcT+VyhJZNgET2KX6eSc8F7-RQ@mail.gmail.com>
 <CALF4ZcA1YvrtLz=xjuEu=ZeEed7t4-NfT=vxF3ve2Yrp7=xNfg@mail.gmail.com> <CALx8yCwPhdUO5nLuD=X00gkNAkgLBjDt5T8p9WXEzBWq6OAoEQ@mail.gmail.com>
From: Registry Abuse <registryabuse@rightside.co>
Date: Fri, 15 Jul 2016 17:12:12 +0100
Message-ID: <CALF4ZcDE5S3v9WP8jATnN22VgGecdxkytnwA1XjT85sTfmqHqQ@mail.gmail.com>
Subject: Re: serverHold status of cocaine.ninja
To: Les <les@lesderid.net>
Content-Type: multipart/alternative; boundary=e89a8f83a233bf97b60537aee286

--e89a8f83a233bf97b60537aee286
Content-Type: text/plain; charset=UTF-8

Dear Les,

Alas that is the only passphrase provided Probably best in this instance to
conclude your investigation as you see fit, and should any further reports
be receive, I shall escalate accordingly.

Kind regards,

Alan


On 15 July 2016 at 16:37, Les <les@lesderid.net> wrote:

> Hi
>
> This passphrase doesn't seem to work for these archives. Are you sure
> this is the passphrase for 'https://a.cocaine.ninja/REDACTED' and
> 'https://a.cocaine.ninja/REDACTED'?
>
> Here is a log showing how I tried to extract it:
> https://pst.moe/paste/REDACTED?format=raw.
>
> Kind regards
>
> Les
>
> On Fri, 15 Jul 2016 at 09:52 Registry Abuse <registryabuse@rightside.co>
> wrote:
>
>> Dear Les,
>>
>> The passphrase you require is : REDACTED
>>
>> Kind regards,
>>
>> Alan
>>
>>
>> On 15 July 2016 at 00:28, Les <les@lesderid.net> wrote:
>>
>>> Hi
>>>
>>> Thank you for the reply. I'm glad you understand and will handle it in
>>> a better way in the future.
>>>
>>> I have investigated the following files and removed them:
>>> http://a.cocaine.ninja/uiabmx.006
>>> http://a.cocaine.ninja/pyukki.005
>>> http://a.cocaine.ninja/szciav.004
>>> http://a.cocaine.ninja/swytuv.003
>>> http://a.cocaine.ninja/pqwmfr.002
>>> http://a.cocaine.ninja/kjkxdy.001
>>>
>>> This leaves these two files:
>>> https://a.cocaine.ninja/REDACTED
>>> https://a.cocaine.ninja/REDACTED
>>>
>>> These two files are encrypted, making it impossible for me to check the
>>> nature of their contents without the passphrase. Since asking me to
>>> remove encrypted files without providing me with the passphrase would
>>> be an effective way to censor the file host, I'm afraid I can't remove
>>> them. If you, or the IWF, has the passphrase, please send it to me so I
>>> can investigate it further. If that's not possible, I hope you
>>> understand I can't remove them.
>>>
>>> Again, thank you for restoring the domain's status.
>>>
>>> Kind regards
>>>
>>> Les De Ridder
>>>
>>> On Fri, 15 Jul 2016 at 00:40 Registry Abuse <registryabuse@rightside.co>
>>> wrote:
>>>
>>>> Dear Les,
>>>>
>>>> Many thanks for your communication, and we do certainly empathize with
>>>> the situation. Please understand that reported instances of Child sexual
>>>> abuse material are considered to of the utmost urgency and must be
>>>> mitigated to ensure access to such material is immediately restricted to
>>>> prevent the further harm and re-victimisation. To ensure that this matter
>>>> can be resolved as a matter of priority the following files are those which
>>>> have been reported as compromised.
>>>>
>>>> http://a.cocaine.ninja/uiabmx.006
>>>> http://a.cocaine.ninja/pyukki.005
>>>> http://a.cocaine.ninja/szciav.004
>>>> http://a.cocaine.ninja/swytuv.003
>>>> http://a.cocaine.ninja/pqwmfr.002
>>>> http://a.cocaine.ninja/kjkxdy.001
>>>> https://a.cocaine.ninja/REDACTED
>>>> https://a.cocaine.ninja/REDACTED
>>>> https://a.cocaine.ninja/REDACTED
>>>> https://a.cocaine.ninja/REDACTED
>>>>
>>>>
>>>> *Given the nature of the service on Cocaine.ninja, I am removing the
>>>> serverhold for domain, effective immediately, on the understanding that the
>>>> referenced files are investigated and the matter remediated without delay.* I
>>>> would further ask that you confirm within 24 hours that this matter has
>>>> been remediated. If no such confirmation has been received, we do reserve
>>>> the right to suspend the domain again.
>>>>
>>>> Again we understand the difficulties that may be experienced in
>>>> maintain such a file hosting service; however, it is not for the registry
>>>> to advise on how to deal with abuse within your service. We can but remind
>>>> that the Registry does maintain an acceptable use policy (AUP) relating to
>>>> the use of our TLDs and it is up to the registrant to ensure compliance
>>>> with the terms of this AUP.  That being noted, Rightside does not wish to
>>>> unnecessarily interfere with the enjoyment of the domain and we are happy
>>>> to work with our registrants to ensure such difficulties are not
>>>> experienced again. As such, for future reference, the registry has noted
>>>> the nature of the service being provided in connection with the domain
>>>> cocaine.ninja, and shall approach any reported issues of abuse for this
>>>> domain in a manner appropriate to the in  service you provide (i.e. prior
>>>> to any such future registry actions occurring, we shall endeavour to ensure
>>>> that both your registrar and your abuse notification address are provided
>>>> with notice and a reasonable opportunity to address the issue.)
>>>>
>>>> We thank you for you understanding in this matter,
>>>>
>>>> Kind regards,
>>>>
>>>> Alan Woods
>>>> Registry Compliance Manager
>>>>
>>>>
>>>>
>>>>
>>>> On 14 July 2016 at 18:59, Les <les@lesderid.net> wrote:
>>>>
>>>>> Hello
>>>>>
>>>>> I'm the registrant of cocaine.ninja. Today I noticed my domain name
>>>>> status was changed to 'serverHold'. I contacted my registrar,
>>>>> namecheap, and they told me that cocaine.ninja is confirmed by the
>>>>> Internet Watch Foundation (IWF) as being associated with child abuse
>>>>> imagery.
>>>>>
>>>>> On cocaine.ninja, I host a public file host. I most certainly don't
>>>>> condone illegal content, such as child abuse content or copyrighted
>>>>> content, being uploaded. The FAQ, which is required reading material
>>>>> for all uploaders, says the following: "No Child porn, anything else
>>>>> goes until I get a lawsuit I guess.". This may not be sufficient, so I
>>>>> will replace it with "No child abuse content, malware, or other
>>>>> content
>>>>> that is illegal in France and/or the United Kingdom".
>>>>>
>>>>> Furthermore, there is an abuse contact (abuse@cocaine.ninja) on the
>>>>> front page. E-mails sent to this address are checked and dealt with
>>>>> promptly, usually within 8 hours, since I'm the only person who has
>>>>> access to the server and the abuse mailbox. In case illegal content is
>>>>> confirmed, the files are deleted from the server and all backups, and
>>>>> a
>>>>> transparency report is created. You can find earlier transparency
>>>>> reports at https://fuwafuwa.moe/transparency/cocaine.ninja/.
>>>>>
>>>>> Since my service is privacy oriented, which is one of the reasons I
>>>>> don't log connections or uploads, it's more likely to be a target of
>>>>> illegal uploads than other file hosts. There is sadly nothing I can do
>>>>> about that other than closely monitoring the abuse mailbox. As a
>>>>> service provider with a large amount of uploaded content and users,
>>>>> it's not possible to check each and every file for illegal content.
>>>>> Any
>>>>> suggestions on how to handle this problem would be very much
>>>>> appreciated.
>>>>>
>>>>> The goal of cocaine.ninja is to be a platform that allows anyone to
>>>>> upload their files while staying anonymous and being protected from
>>>>> government surveillance. It is not a platform for illegal content.
>>>>>
>>>>> I hope this matter can be resolved ASAP.
>>>>>
>>>>> Kind regards
>>>>>
>>>>> Les De Ridder
>>>>>
>>>>
>>>>
>>

--e89a8f83a233bf97b60537aee286