Received: from cock.li (cock.li [185.100.85.212]) by anna.lesderid.net (Postfix) with ESMTP id 2C040D557D for ; Wed, 12 Oct 2016 12:07:10 +0200 (CEST) X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on cock.li X-Spam-Flag: YES X-Spam-Level: ***** X-Spam-Status: Yes, score=5.4 required=5.0 tests=BAYES_99,DEAR_SOMETHING, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,NO_RECEIVED,NO_RELAYS autolearn=disabled version=3.4.0 X-Spam-Report: * 3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100% * [score: 0.9958] * 2.0 DEAR_SOMETHING BODY: Contains 'Dear (something)' * -0.0 NO_RELAYS Informational: message was not relayed via SMTP * -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature * 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily * valid * -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's * domain * -0.0 NO_RECEIVED Informational: message has no Received headers Date: Wed, 12 Oct 2016 06:06:50 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=neustar.biz; h=from : to : message-id : subject : mime-version : content-type; s=mx3.neustar.com; bh=D68Pqg/ao6l2BYgTd0y/nPGuGd5M7kMISwz+jxR3jkQ=; b=luCRUujiB7iKi9l4GbK6df2n1bz8sj13PvH1RXXwk/9DYIdAGZ+qNYzj4az1+dCLKfz8 pAflCJT14q6rnwRO/3IBcoWmYDLGE6Pi1E8bGvMcQNiBMDUO+i6TvITYacPqnEPuoQjd HYAT/tMBJeAz7gInUCVjoU9yF+BV68n1NvFA1PZsoeCWRjVVZLvbkKbk6OIYaE0q7mL/ V68TbUAXSLBZU1N8zY7qbpyKtJKmRewrE8m0NLaaABvOecRLdi9uAqlCUKn66nrdp7BU bvVN/0wZu293jBU0N62PlISFjHulsvvsZdz7kNhH4O+Y/Tjnk5jaT5Lnd5ZOK8t7g8e6 tQ== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=neustar.biz; h=from : to : message-id : subject : mime-version : content-type; s=mx2.neustar.com; bh=D68Pqg/ao6l2BYgTd0y/nPGuGd5M7kMISwz+jxR3jkQ=; b=4Q2sHe7OfSZlYSuEqgyT5PYocy1Dx74n+EarN+lF4lYlohIhmk9ImonS45RJahkwcZuM tAX2w2gxH2sfhfxMR54Yy580HAQpHUUFb4A9hcxV+Bxf+hSH2Rz8XjsssGur5OrwAHVu KOCiluvtfa10GlIabJW7vCW9U/DSUVGRu1mSUXQRVkI1mmE1hauIf8DdC1xnH5YUa0we RUZk6C4TzR/nsHMNXhTEmzALnnnDKgqtxytWyo22DdiGILoldj83N2/RNYVxqvblSM62 Uz6fiK+o2vCJo42jWv8suJq6dYdRN0TX2UolnXekobY9rLKbRgzkKMbIzD83vupiM9YF WA== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=neustar.biz; h=from : to : message-id : subject : mime-version : content-type; s=mx1.neustar.com; bh=D68Pqg/ao6l2BYgTd0y/nPGuGd5M7kMISwz+jxR3jkQ=; b=Ho8p8j14txOJpskzbqBvmdc9iabMj6/l/whXC5//kYKd2J4RsrapjApCe5Bb7qEfisMS aOKQZsdkBRsVL/Jw+CSHMqfg0TAqZ7z56TA5PVpqcdggE4bpjM/dGqMYSBla1V7kfpaX FCKV+aFPoPJ1znXlF1qJ9njGsoAHfQD9ruTsgNWmCdMT4+BzxxqwcY0wbI48Dti0gh1y QYPl5NysA0tb0tyRbOcOmGRirSCyYFWqoH0ft/yQ852XTMiQlgpIY0fipSqAarcxzAI4 76FGLtFWvLheIkuFpuLHZprdu1FFprdtycMm3EcZQMQlIXwpGdAJTMLR3d9EG2xkXROg Zg== From: "Rightside Registry Abuse Team <donotreply@neustar.biz>" To: "abuse@cocaine.ninja" Message-ID: <438642738.18791476266810824.JavaMail.bizapp@chrecprvrat20.nc.neustar.com> Subject: Immediate attention required : Report of CSAM on cocaine.ninja *CONFIDENTIAL* MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="----=_Part_1879_1922756742.1476266801707" X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:,, definitions=2016-10-12_06:,, signatures=0 ------=_Part_1879_1922756742.1476266801707 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: Quoted-printable Dear sirs, The below URL was reported to us via The Internet Watch Foundation. The Dom= ain has been listed as having been a source of Child Sexual Abuse Material = (CSAM) Given the authority and position of the IWF (or their partners), we are sat= isfied that the relevant authorities in the countries where such content ha= s been hosted, have been appropriately notified. As such Rightside Registry= is providing you with a period of 24 hours to review this matter and take = appropriate action. Should no action or response be noted upon expiration o= f the 24 hour window, the registry shall consider its options under the ter= ms of our Acceptable Use (Anti-Abuse) policy. (https://urldefense.proofpoin= t.com/v2/url?u=3Dhttp-3A__rightside.co_fileadmin_downloads_policies_Rightsi= de-5FAcceptable-5FUse-5FPolicy.pdf&d=3DDQICAg&c=3DGjyJudwt7aZvFy3eD6tzAWN2T= RzeBZ1HFMUO9tFwsS4&r=3DwlT43QfabsCplzu7fLhfhjSEWmjvkbrX43tc3gpOAZ4&m=3D3mJw= qIzRUifkdYZJzwuZbGvihM1fc9UAAGQ7br6etAI&s=3D22zC8u283jGv3BMOuhA_IyUzPWlaAjY= RQUP2kGadJ_I&e=3D ). Should you require more time to conduct an internal in= vestigation, please let us know immediately stating clearly the reasons and= need for such an extension.=20 The flagged URL(s) is as follows: https://urldefense.proofpoint.com/v2/url?u=3Dhttp-3A__a.cocaine.ninja_ywuoh= i.mp4&d=3DDQICAg&c=3DGjyJudwt7aZvFy3eD6tzAWN2TRzeBZ1HFMUO9tFwsS4&r=3DwlT43Q= fabsCplzu7fLhfhjSEWmjvkbrX43tc3gpOAZ4&m=3D3mJwqIzRUifkdYZJzwuZbGvihM1fc9UAA= GQ7br6etAI&s=3DAjM2qDS7vnD1LUcgmg1MnhttmjOfiW00dIs_DHrvAhg&e=3D=20 PLEASE NOTE: that the URL(s) should remain strictly confidential. As each d= omain has been assessed as containing CSAM, which although normally 'hidden= ', depending on local laws and jurisdiction, the accessing of such content = may be considered an offence.=20 Registrant / Registrant Organization: WhoisGuard Protected/WhoisGuard, Inc. Evidence Noted: IWF serial number: 201610121190807=20 Reason code: CSAI=20 URL: a.cocaine.ninja/ywuohi.mp4=20 IP Address: 163.172.151.248=20 Date/time Assessed: 12/10/2016 09:11:31=20 We have had the above website reported to us, which contains material which= we believe to be potentially criminal under UK law. It depicts children ap= parently under 18 engaged in explicit sexual activity or posed to be sexual= ly provocative. This material is potentially criminal under the Protection = of Children Act 1978, i.e. indecent image(s) of a child under the age of 18= .=20 Where the content is hosted outside the UK, we have also notified the relev= ant hotline/LEA Partner. ENDS We trust that you review this matter with all due urgency.=20 Kind regards, Rightside Registry Abuse Team ------=_Part_1879_1922756742.1476266801707--