Received: from cock.li (cock.li [185.100.85.212]) by anna.lesderid.net (Postfix) with ESMTP id D6EB1EF51B for ; Tue, 16 May 2017 13:35:52 +0200 (CEST) X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on cock.li X-Spam-Level: ** X-Spam-Status: No, score=2.8 required=5.0 tests=BAYES_50,DEAR_SOMETHING, NO_RECEIVED,NO_RELAYS,T_DKIM_INVALID autolearn=disabled version=3.4.0 Date: Tue, 16 May 2017 07:36:42 -0400 Authentication-Results: cock.li; dkim=pass reason="2048-bit key; unprotected key" header.d=neustar.biz header.i=@neustar.biz header.b=Hwod3Me3; dkim-adsp=pass; dkim-atps=neutral DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=neustar.biz; h=from : to : message-id : subject : mime-version : content-type; s=neustar-biz; bh=1pYZCOdFgQTK6jhqepq4KYBQw+d7fDqOQ6xZpEuy698=; b=Hwod3Me37hOskUJRlxYrCNOEaN+yVE7gesC48pzq1bGQ8YwSHIA2X4LW9Uws5CP/z0Rv UNJ9Q1ZS0SIU0ejPtDwlECuIsL6yuuyeCq8VLxHA5iHc4hoJeZBlw3XEkbrJTo1px5VT GZc/eRt+WZBz5MNEzEzakuqNYgvTKwp1rj2otPFcCdfeHocKMoIjgUp5UAz5yu6v3cmS wc5q4jAmEcaeYdn5ZU0wjcpTal8OdeKPBHNTAlfig/QrLJC7F1nWzQ7FSUahLAaNY+di XwqR3UyzKtIDNMNNGiRGo9xAadNe8oC+6jUTtTwF8jpmtvWtRC/xKNwQJlg49PbOiize Ng== From: Rightside Registry Abuse Team To: "abuse@cocaine.ninja" Message-ID: <1650083974.7161494934602545.JavaMail.bizapp@chrecprvrat20.nc.neustar.com> Subject: Immediate attention required : Report of OTHER on cocaine.ninja *CONFIDENTIAL* MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="----=_Part_716_17986422.1494934602457" X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:,, definitions=2017-05-16_03:,, signatures=0 ------=_Part_716_17986422.1494934602457 Content-Type: text/plain;charset=utf-8 Content-Transfer-Encoding: Quoted-printable Dear sirs, The below URL was reported to us via The Internet Watch Foundation. The Dom= ain has been listed as having been a source of Child Sexual Abuse Material = (CSAM) Given the authority and position of the IWF (or their partners), we are sat= isfied that the relevant authorities in the countries where such content ha= s been hosted, have been appropriately notified. As such Rightside Registry= is providing you with a period of 24 hours to review this matter and take = appropriate action. Should no action or response be noted upon expiration o= f the 24 hour window, the registry shall consider its options under the ter= ms of our Acceptable Use (Anti-Abuse) policy. (https://urldefense.proofpoin= t.com/v2/url?u=3Dhttp-3A__rightside.co_fileadmin_downloads_policies_Rightsi= de-5FAcceptable-5FUse-5FPolicy.pdf&d=3DDwICaQ&c=3DGjyJudwt7aZvFy3eD6tzAWN2T= RzeBZ1HFMUO9tFwsS4&r=3DwlT43QfabsCplzu7fLhfhjSEWmjvkbrX43tc3gpOAZ4&m=3DwF0A= tbCeLW61DxK499jjnZtEigaNr_TnVMCrSY5LF-c&s=3DcqsPwi3i5edSpM_Sji4Mot9bNEAmtFx= z-Yq91c9fP7w&e=3D ). Should you require more time to conduct an internal in= vestigation, please let us know immediately stating clearly the reasons and= need for such an extension.=20 The flagged URLs are as follows: https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__a.cocaine.ninja_dnkr= ee.jpg&d=3DDwICaQ&c=3DGjyJudwt7aZvFy3eD6tzAWN2TRzeBZ1HFMUO9tFwsS4&r=3DwlT43= QfabsCplzu7fLhfhjSEWmjvkbrX43tc3gpOAZ4&m=3DwF0AtbCeLW61DxK499jjnZtEigaNr_Tn= VMCrSY5LF-c&s=3DZp3Hgv5PtNY0vkOwmT4cmmTmtDgTd6NrKl5BS9bLng8&e=3D=20 https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__a.cocaine.ninja_oqiw= td.jpg&d=3DDwICaQ&c=3DGjyJudwt7aZvFy3eD6tzAWN2TRzeBZ1HFMUO9tFwsS4&r=3DwlT43= QfabsCplzu7fLhfhjSEWmjvkbrX43tc3gpOAZ4&m=3DwF0AtbCeLW61DxK499jjnZtEigaNr_Tn= VMCrSY5LF-c&s=3DfJHWAfRGLbGxvTvoGJhDOj2_CjeTtCut9JWWxgATXd0&e=3D =20 https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__a.cocaine.ninja_skjk= hr.jpg&d=3DDwICaQ&c=3DGjyJudwt7aZvFy3eD6tzAWN2TRzeBZ1HFMUO9tFwsS4&r=3DwlT43= QfabsCplzu7fLhfhjSEWmjvkbrX43tc3gpOAZ4&m=3DwF0AtbCeLW61DxK499jjnZtEigaNr_Tn= VMCrSY5LF-c&s=3Dv0W0pe9Bvva8gJ1z3hQGQHsyvafmkwfshLGkV4T37Ho&e=3D =20 PLEASE NOTE: that the URL(s) should remain strictly confidential. As each d= omain has been assessed as containing CSAM, which although normally 'hidden= ', depending on local laws and jurisdiction, the accessing of such content = may be considered an offence.=20 Registrant / Registrant Organization: Les De Ridder/ Evidence Noted: IWF alert:=20 IWF serial number: 201705161252124=20 Reason code: CSAI=20 URL: a.cocaine.ninja/dnkree.jpg=20 https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__a.cocaine.ninja_oqiw= td.jpg&d=3DDwICaQ&c=3DGjyJudwt7aZvFy3eD6tzAWN2TRzeBZ1HFMUO9tFwsS4&r=3DwlT43= QfabsCplzu7fLhfhjSEWmjvkbrX43tc3gpOAZ4&m=3DwF0AtbCeLW61DxK499jjnZtEigaNr_Tn= VMCrSY5LF-c&s=3DfJHWAfRGLbGxvTvoGJhDOj2_CjeTtCut9JWWxgATXd0&e=3D =20 https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__a.cocaine.ninja_skjk= hr.jpg&d=3DDwICaQ&c=3DGjyJudwt7aZvFy3eD6tzAWN2TRzeBZ1HFMUO9tFwsS4&r=3DwlT43= QfabsCplzu7fLhfhjSEWmjvkbrX43tc3gpOAZ4&m=3DwF0AtbCeLW61DxK499jjnZtEigaNr_Tn= VMCrSY5LF-c&s=3Dv0W0pe9Bvva8gJ1z3hQGQHsyvafmkwfshLGkV4T37Ho&e=3D =20 IP Address: 163.172.151.248=20 Date/time Assessed: 16/05/2017 12:12:00=20 ENDS=20 We have had the above website reported to us, which contains material which= we believe to be potentially criminal under UK law. It depicts children ap= parently under 18 engaged in explicit sexual activity or posed to be sexual= ly provocative. This material is potentially criminal under the Protection = of Children Act 1978, i.e. indecent image(s) of a child under the age of 18= .=20 Where the content is hosted outside the UK, we have also notified the relev= ant hotline/LEA Partner.=20 Regards=20 TB=20 Internet Content Analyst=20 Internet Watch Foundation=20 www.iwf.org.uk Please note that we have also sent notification to the Registrar on Record.= =20 We trust that you review this matter with all due urgency.=20 Kind regards, Rightside Registry Abuse Team ------=_Part_716_17986422.1494934602457--