gistfile1.txt

From: Derek Moore <derek.p.moore@...>
To: jya@pipeline.com
Subject: Re: .info sites

Also, I can't help but notice that http://natsios-young.com/ is down
with a rather ominous message & even has embedded
click-tracking/redirect code to 800paydayloans.com!

Please advise,

Derek


On Sun, Dec 19, 2010 at 2:33 PM, Derek Moore <derek.p.moore@...> wrote:
> John Young,
>
> I can't help but notice that you have files redirecting to
> cryptome.info, maybe this is a practice you've had going for a while,
> but I only now notice it on your site among the "Wikileaks Series on
> Cryptome 2006-2010" info.
>
> Among those files is information on NSA-affiliated subnets &
> wikileaks.org ownership.
>
> Now that both wikileaks.org & cryptome.org are redirecting to .info
> sites, what are we to think?
>
> Your "Wikileaks Series" dump indicates that cryptome.info is hosted on
> NSA-affiliated DNS & subnets, & that you control wikileaks.org (which
> now redirects to FSB-affiliated subnets).
>
> "John Young" & wikileaks.org here:
> http://cryptome.org/0003/wikileaks-series-reg-7.jpg
> (registration now reads "John Shipton" & redirects to wikileaks.info
> on Russia-Panama network)
>
> "cryptome.info" IP & DNS here:
> http://cryptome.info/nsa-ip-update.htm
> (cryptome.info NS & A records in 205.178.0.0 subnet of 205.0.0.0 -
> 205.255.255.255)
>
> What is going on here?
>
> Thanks,
>
> Derek