Received: from EUR03-VE1-obe.outbound.protection.outlook.com (mail-eopbgr50123.outbound.protection.outlook.com [40.107.5.123]) by anna.lesderid.net (Postfix) with ESMTP id BC9CAD1D56 for ; Thu, 21 Jul 2016 11:34:05 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=TheIWF.onmicrosoft.com; s=selector1-iwf-org-uk; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=73Lzot3s9LR1KFTiRU8wtPX3fsB2Wk1P/zYoMapDGWM=; b=OW+Xi39c8fvwCBTXyG6Rva2FxX4GlO+IabS7Jsq0XPtJuiZ5Vk6T38eIi7F5nzVHShJfM51ZpHxuxb6oZniTfiXKdL0m3JpN6LhxJgTXmGTMus8pXEwMf8FQR/+PssRn5ypRmoEcPDH2zVoLWsOUray69FHOdANYOMsI30kuoso= Received: from AM5PR0501CA0029.eurprd05.prod.outlook.com (10.164.187.39) by DB5PR05MB1477.eurprd05.prod.outlook.com (10.164.39.139) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.544.10; Thu, 21 Jul 2016 09:33:59 +0000 Received: from VE1EUR03FT011.eop-EUR03.prod.protection.outlook.com (2a01:111:f400:7e09::207) by AM5PR0501CA0029.outlook.office365.com (2603:10a6:203:17::39) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.544.10 via Frontend Transport; Thu, 21 Jul 2016 09:33:58 +0000 Authentication-Results: spf=pass (sender IP is 92.52.91.42) smtp.mailfrom=iwf.org.uk; lesderid.net; dkim=none (message not signed) header.d=none;lesderid.net; dmarc=bestguesspass action=none header.from=iwf.org.uk; Received-SPF: Pass (protection.outlook.com: domain of iwf.org.uk designates 92.52.91.42 as permitted sender) receiver=protection.outlook.com; client-ip=92.52.91.42; helo=rms32.iwf.org.uk; Received: from rms32.iwf.org.uk (92.52.91.42) by VE1EUR03FT011.mail.protection.outlook.com (10.152.18.134) with Microsoft SMTP Server id 15.1.549.5 via Frontend Transport; Thu, 21 Jul 2016 09:33:59 +0000 Date: Thu, 21 Jul 2016 10:33:58 +0100 To: From: "complaints@iwf.org.uk" Reply-To: "complaints@iwf.org.uk" Subject: General Corres Subject : Follow up contact with the IWF Message-ID: <34e00c26437ebcdbaff6446a47542d55@rms32.iwf.org.uk> X-Priority: 3 X-Mailer: PHPMailer 5.2.1 (http://code.google.com/a/apache-extras.org/p/phpmailer/) MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="b1_34e00c26437ebcdbaff6446a47542d55" X-EOPAttributedMessage: 0 X-Forefront-Antispam-Report: CIP:92.52.91.42;IPV:CAL;CTRY:GB;EFV:NLI;SFV:NSPM;SFS:(10019020)(6009001)(7916002)(2980300002)(438002)(28505001)(199003)(71364002)(189002)(25786007)(106466001)(33646002)(8676002)(15974865002)(450100001)(89996002)(81156014)(8936002)(81166006)(7696003)(586003)(107886002)(356003)(19580405001)(23466002)(77096005)(5003600100003)(19580395003)(7846002)(86362001)(305945005)(74482002)(50986999)(53416004)(110136002)(50226002)(97736004)(551544002)(15975445007)(2906002)(26826002)(43066003)(86582002)(223583001)(84326002)(229853001)(24736003)(3450700001)(345774005)(189998001)(108616004)(53806999)(81686999)(68736007)(512934002)(87936001)(3820100002)(2351001)(17700200002)(79116004)(78656002);DIR:OUT;SFP:1102;SCL:1;SRVR:DB5PR05MB1477;H:rms32.iwf.org.uk;FPR:;SPF:Pass;PTR:InfoDomainNonexistent;A:1;MX:1;LANG:en; X-Microsoft-Exchange-Diagnostics: 1;VE1EUR03FT011;1:8awTeOIcYXS6NI+Ek4Ry3sQjJACe0l4dUdSXe/U7TxI8IaRTx6zr7IvNAqvNjDbubHuIY6nFgGqweYdkrQDQ/V4FMZkWD/GXre4lgcxz8DTVYKKOLWlPbpqcb7KRthwN1IPnW3DwQwh8BuCmTj2c7+f7K2e6tAVZwXVpaWIVy4QAm1eqzwzV8SyLL8PtWrqJSHk5gHqYipd2wizZLNVk4My/5AqoKlS1IHCLDrUoglLJlyvjfpLLE0NkOuQZ6AQYfrD+Yhxkf0HJQW/0/k6jcyLrNBhnQePs/u/HPGQlHxN7J1e2onobdjt5RDSSLJs6+4MhAdGRnKXmET4Tj9keJtSjW9+sb+i7hMzJspISmjUUxvF9pvk7Q38uQMWGfWihjNqEVljHXzb1p9e8vI4haN+oSJ0BUQPu4B52WOHWRDsaeZtdw0F4Uv9iycl9gzFUtpOXFuGW2QXYxKJ6AIQ+2AvGeMR1xkoI5kaMcVBAKf0= X-MS-Office365-Filtering-Correlation-Id: 671904d1-5f71-4eeb-7d69-08d3b14a24e9 X-Microsoft-Exchange-Diagnostics: 1;DB5PR05MB1477;2:Bxzu7yLshAq94f3mVEHUADJ5POn2yxTQM35AYHB6anxH2yVyh94vEJwoe4U1LYO9OPHGV6VnvtbP2V5mB+lgAkYtjCBo0QWKH572kReLdTVfJ/5qRsyjxxr/BCFefSm5xMuWfw1gtv1/pjlboHrWOE7przTjF/CuR1KYqK2SIUwSdU6s16TwOjUSjkbE76Ox;3:9B7Q5751UEcPOGEA6ikB5r84PqVmaL1c9oTEmF595cicB6gR0+jHSN0ztxw5UAMnF/pX7lLB8VkqcMGjJJUEkMmHMTTiubCtpmWAx/lZ8Nu0bxqTkpXdISWWPEN2QO2m0w09xBa1LmBlsM4uGMQtJxVjwnyXJWv4ll2HrTPnuI41++0bL3/HK4YbEEuvkvR44ZHdgrqMfIjlcrwZUK0ueSs2q1zOdgVfujKdYK7rqTfC4wxd8N9zoQLuoMVx3/6QW5wnn08b6fG0U3Rx0HJWtQ==;25:zf6Rj6IRZnlCsyOJhBJloNc6CkQjNJXSeIG9zn2zY/Rk5n3qH1tC8a4L3+DWLp6nuHcWtpe5H4EIvWtBMqRoyr+xTAvxbGApeWxgYyCh0iSi1FPy5shOeVcF5HM+bH+declKJc/ylzhPz6kZbJIK5RkuJEVXL1XVxr311VesYXeVx0X+QTymQNL4igXYldKlkzNSdztL7qC5Bm8MdDDMIZRcg8HlqBTs1gPgUVaHi/kWhQ7WpjLESpMYKg1TCPDcz6SwvALIcIidp95uCHemqCd2hpdICj12R2G+GhyM1D6XBx+v5F/nZH1tSRGfJx6bOg4+Fs0kBKpuiRVDXrdI8IWxcXCnVU/cxu/1vniHf2cikM6r5LF2V8AYoB7xSVGD3QplZhdx61nh2Cqva4eFc+thBKrBtSAhhLlYGk8IHPk= X-Microsoft-Antispam: UriScan:;BCL:0;PCL:0;RULEID:(8251501002);SRVR:DB5PR05MB1477; X-Microsoft-Exchange-Diagnostics: 1;DB5PR05MB1477;31:WupG6V1FhLHy8bkCh65vp3hRN9s1R9PPANKbhbRij6CFu4OFSlbWxNVJPW4cdOI0TpiZNXYpQH1xn+5QNsHFOuTDGPCsQs18tAhA7GKNFZgl6aorZ9tq0vk144JpPLTbo5U3bf7mXMp7Yu7/VyQy6CR4AJs/wCjxQlFLagRlVb87yMN3AQ0HaaW7ihqqOf1lwJ/cOmI9aDUjHvRg9Y1viQ==;20:cjqYlADxzyKffvcB0sFg6Hqo30OOyGDvJhvSrQDsbMzARXTOhzx74+JEdjX2K2Qfn7P4K5wkW73/d3e5NTkuh+zEhQJ7s6q7CoDj9E1w9JvGagZdLK4PNeEwwPk2xd5joZYYAsnlg6YmKGYvqImGSHd9AjAjdFpEo8KrbZ2my44x3P4rE9Sot9swjA9dYy++Qn39HKOt5L4eLqH4W3x5fFFpqa5CEDWDtrNhy7RENaiUY19+zLJoHnHINFgQCS8QVgvg8/SEF+sfPsYY58fcbgKNoKPvxnQLg79tvi7IuDYYMyzswiZfRbjvK/sK4Rg/yVm2IgHB8qhj8c4WP+tcuQ== X-Microsoft-Antispam-PRVS: X-Exchange-Antispam-Report-Test: UriScan:; X-Exchange-Antispam-Report-CFA-Test: BCL:0;PCL:0;RULEID:(601004)(2401047)(13023025)(13013025)(13021025)(5005006)(8121501046)(10201501046)(3002001);SRVR:DB5PR05MB1477;BCL:0;PCL:0;RULEID:;SRVR:DB5PR05MB1477; X-Microsoft-Exchange-Diagnostics: 1;DB5PR05MB1477;4:0LHkQLTNLXMs21S911Rrnp3xj3oL8ZNY4+EoYVy5rer1qNXjn1m+DyPgHxXibeCAqwnUujXLzgOa4Px8+lKz3ENsj4yhv5eUJfBlLl1mrt1VCzNFxwwrIxexRcHDUoTwH+zy44aLjsRHuWSLBJDoHBB9rC9xjP2FI6gYzvz4N4fvOwWrLbH9cLSM2MffYMPiCslrxq/J2kVQ2gja4zZQY6/26ZXIAqKtO6kl7JBEMa5kvL7HvWFZ/KZMAhv5Yeuk20M/3NsOhct8L000oKnNrm8nRZK60JoPYIT0B6vr4GW/Yi0RekHCEAZHXJ+bhiMQnkYGS9Ru9O4WuGsiKD8WjDk4XZclc+zsoWtyyoS22dR67V5GrTn5EZl9gYxvmfMToldVBPOLA1T3C6W4mFu7QEm+tRrxdZRoEBPEbZK0UG4= X-Forefront-PRVS: 0010D93EFE X-Microsoft-Exchange-Diagnostics: =?us-ascii?Q?1;DB5PR05MB1477;23:+auMz9jNmIs82Dp0JKdAP/C98W1b1JQ43kro6Tg3K?= =?us-ascii?Q?aPQ5WcbcvLTgkiVj5vv2OYM6ibQX9Vphf+6fITZwnZHiALsviAEK8XFliO63?= =?us-ascii?Q?yUn+i9C13oWSzD4UB8O6+X80JD9UwclVc+on04SklvbNtgKbJCJ4PFskm9rN?= =?us-ascii?Q?RVeSJyWl0tpQCKeIspRhHvQ8ei0WjMfjcrHic5Jz/JNgqmIYk+PuoRAgnyqM?= =?us-ascii?Q?Uco3XBRw4jnHdkwXNmKrNzSc8yv40nERJUeQaOt1xdqfonThI0MSQg+co3nP?= =?us-ascii?Q?g05BR9nLr2C50UhlRgjXZMmjjJQ2cOmtxjbgYlNY7Tpdj8kU5RjcjrNa6xyg?= =?us-ascii?Q?eDzrqyt75g87Fkdt7Ix6sP6ZHd+vVwsW2JHlheoNnHz1/aWsr/TnVZg2Yot4?= =?us-ascii?Q?Nh3oTg6w/AGXysrDlYL8aRfzuhT6M90c/CYk14eguqXlu6M58ImaxKdK5m8/?= =?us-ascii?Q?QHZ5sL/MuSnA/Nc0p1QAO/H0VH+pgyktb2v4K7eozVmBklEBOIESysDRYTZQ?= =?us-ascii?Q?MyCVR1cBgAGJNo3J95aYHww6QUu/RWvrZ6/7ROinDDK5zbEj4k31KvnApmql?= =?us-ascii?Q?hr79kJkgdbYCF5O/YoijCmuSPcDRK7/7X9q7KBJtrilhQSmAYbCT2Yo/mxyH?= =?us-ascii?Q?Tr/sS5diGTT0u4WLjcfcE9wXqTC0YHCJ7BXUuR0DlYJ3Q+uA/i2pDfdVdHdt?= =?us-ascii?Q?qfdGvSLvZqDx6fbSgsiU/OMsIjmxTM/rF7FimrASJdKDvkFY7dxBud0Bl7Dv?= =?us-ascii?Q?K7z0AhBc5OsJokcrAIyEfU1CRcKfGBeHx/ce4dWSiUyztcqXcHSsDKruHsEN?= =?us-ascii?Q?piHPbqGyktl9LK/lvHuy/uAOJFt78xwSuzeTmnS1FNaEDzLj6H2dRfkZA1gx?= =?us-ascii?Q?Mu1ksOBjLdHjKE9OecUX3D51Aj8uf15OQ8GuRb/LsUnkZ/YhZG0XstJAN2t7?= =?us-ascii?Q?ejAMQ/7iOfrIzJVT/o7GlHaFLqt1pSD7NZ2VRAmgPc/5mLCCbmNJsJvNbLIC?= =?us-ascii?Q?8guF9AevQKrTuFlYsJcdFfF1TOxpfmLOUser48+IWiw81gH6P3Nz+M6ZVE7e?= =?us-ascii?Q?Ybk3tdicwSTsPCvaQ1mvlxVYHMMtbAsM3s29vBKweF5eYVBPH5EaaJXWzuMj?= =?us-ascii?Q?BwalqeUSfmyqzb51NS+OThsyjmv1ilXYRTnI8uBEvK1tYetRKaI4GcPSmdAx?= =?us-ascii?Q?ZHuu/75MXSd+LadFG9opZT2yQpolC87mVw53hcgf8ZFrWMMjoAN2jvL7MMnc?= =?us-ascii?Q?ky2geLb5oE3MeIQxJxbTbaN9L8pn6i6u5AbY6rRhLQtgueaX+JDKaUXE/XZZ?= =?us-ascii?Q?eT1cimwGkaYaUf+eOSwsxYZh2mRMTEMUlD5z7tn/We2QB2IwfpDt+mWgFjdo?= =?us-ascii?Q?cFS3wg8Bd5NmRFoOnCrZRP69YU/XjAkxwC05G3geSW4dvAlnZeoZAgsLcWmA?= =?us-ascii?Q?Z4MgLTYUMBCuRwTlLTN/fQLm6hDrS7WDZi5BF4rEKB9RxgiXy+0x+Y4vIhLZ?= =?us-ascii?Q?HVYklQPoxAAsQ=3D=3D?= X-Microsoft-Exchange-Diagnostics: 1;DB5PR05MB1477;6:OZbhJg7Uaq3/ywq9zou/Scpy6o5qLTg4GDDXoD5V/CRFHsOgj9tcDqIot+EwZfwrU4WHtCtD3mcjxfe8z0rCmqtXSBWXReu4hfrNozmKAzvRL7ApfNZBeVBKo7ehAeuG7O3KqA/hN3XCATtTfhQGrg8VBeeI4a1SKrYMPw3EklW7ixpfnwESCBv83V13iAIqBJakk9R0Ouc5gvefhegux5ZNs6BlHQ/UoEa3p8JTzOgm74ajGf8Z6wkXQpApuwsS3N6q6+Kk6q/GB3axx1vB/3PUYUE86SVNTTYcgB2c2rU=;5:NGKlKXPJTdH1Bz21cVoYwyKgLJMjhFWCSyny71IkMHHyw16JzeJEe4CJN99qFMhl7YcINtNrhRzonYRoHWREfD/Q/ntOz4eA9DM87HsSfVGNGRe8JZxYJRNvEeQJmm0V6YHehVxSPcAgfR03k3l+hQ==;24:10JejB3D+q2t00U5hs6ytuwQB/Suh1zX45pgQff/F3M6u7MCY702tlDsLXG2ye44ur45c0x9W4qWpqd2vfQTluCfdb1yyo4N6Lah/3u4HQI=;7:bEaRlb2tWu0ThxOyd4QzFot3JFTy98nclCCbBUsw6OEYe+gjKkNI6WdvSMJt3nSsHIhFCQawS87IdO+IBxo3TRJ2nSvx9Skp5/M+e2DT0jwSv/ygnQL7hoEg0Wg6f1gZFRB0izhStXujuRKCkX3Gkp6Kh+w79pZtKWDhAsho+H1ZuYlf4rPCcm9LM+KjMfCz6mDqiMZZgDNKZFBnoEYWaAXHZrszAovWAeQTgBxTH3XZq41kUcTUx76LEAaYB3aV SpamDiagnosticOutput: 1:99 SpamDiagnosticMetadata: NSPM X-OriginatorOrg: iwf.org.uk X-MS-Exchange-CrossTenant-OriginalArrivalTime: 21 Jul 2016 09:33:59.1849 (UTC) X-MS-Exchange-CrossTenant-Id: 276b2b1d-5f8c-4337-a337-814fac01d2de X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=276b2b1d-5f8c-4337-a337-814fac01d2de;Ip=[92.52.91.42];Helo=[rms32.iwf.org.uk] X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB5PR05MB1477 --b1_34e00c26437ebcdbaff6446a47542d55 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 8bit Dear LDR, Thank you for your follow up email. The IWF are a recognised and authorised body in the UK for the assessment and removal of child sexual abuse images. We are an independent non-governmental organisation operating with the support of the Police and the UK and EU governments. We have a single agenda and do not engage in activities outside the detection and removal of indecent images of children, we do no act on copyright, hate speech, fraud or other potentially criminal activities or other forms of censorship. As outlined, as the content was not hosted in the UK we forwarded our independent report to the French authorities to review. They will have made their own assessments on our report and if they deemed it not illegal in France they would not have taken action. The French hotline work in cooperation with French law enforcement as discussed, to ensure that victims can be identified and any potential criminal offences investigated. We also notified the Registry in this instance, as they are a member of the IWF and as part of our service to them, we provide them with domain alerts whenever we encounter child sexual abuse images on a domain name they administer. I understand your position and I would like to give you comfort that our actions in association with your site and the French Hotline are proportionate and transparent. I hope that this will build trust in the event of any future actions that may need to be taken against child sexual abuse images uploaded by anonymous uploaders on your service. To facilitate this, I have provided a breakdown of how the files were accessed and assessed by our analyst, however for data protection and privacy reasons (which I know you will fully understand) I cannot disclose any personal data that may relate to who may have reported the images to us. In total we actioned 8 URLs which relate to two separate upload/download files. The first two URLS together make up 1 file and need to be combined to extract the content The other six URLs also make up 1 single file and need to be combined to extract the content Set 1 Password: REDACTED You will need both files in order to extract, found here: https://a.cocaine.ninja/nwxceq.001 https://a.cocaine.ninja/gyibxo.002 How to extract: rename file gyibxo.002 to nwxceq.002 and extract file nwxceq.001 by 7z archiver Set 2 You will need to download all 6 files parts from the URLs provided. Rename each file part to kjkxdy.001, kjkxdy.002, kjkxdy.003, kjkxdy.004, kjkxdy.005 and kjkxdy.006. You will then be able to extract the files, beginning with kjkxdy.001, using a 7z archiver. It will not work unless you have all 6 parts. a.cocaine.ninja/kjkxdy.001 a.cocaine.ninja/pqwmfr.002 a.cocaine.ninja/swytuv.003 a.cocaine.ninja/szciav.004 a.cocaine.ninja/pyukki.005 a.cocaine.ninja/uiabmx.006 In terms of our assessment of the content, the multiple images in the downloads consist of images of a known victim age seven to ten and include images in the highest severity offence category of abuse. I trust that the above information indicates the transparent nature of our operations and that due to the nature of the content, that for the victims, their families and for law enforcement, it is important that every effort should be made to remove this illegal content from the internet and help prevent further distribution of these images. Kind regards CH Hotline Manager Internet Watch Foundation Discovery House Vision Park, Histon Cambridge CB24 9ZR w: www.iwf.org.uk e: feedback@iwf.org.uk t: (+44) 1223 203030 --b1_34e00c26437ebcdbaff6446a47542d55