Halal Porn or Phishing??

When you go fishing, you cannot see below the surface so you are never quite sure what you will catch. Likewise when you go phishing for intruder information you never quite no where it will take you.

When I looked up 198.65.147.194 on dnsstuff.com I found:

No PTR records exist for 198.65.147.194.

When I looked it up on netsol.com, I found that it was part of a huge block owned by NTT America.

It was only when I put the IP in my browser URL locater that it took me to IslamOnLine.net.

However, it gets more interesting, when you put IslamOnLine.net into the URL locater, I get two IP’s connecting; The one above and another which easily traces to IslamOnLine as it should. In fact, the one that has no record doesn’t actually connect to IslamOnLine.net but to:

http://198.65.147.194/english/index.shtml a duplicate of IslamOnLine.net.

Now the use of an IP in a cloned site is characteristic of a phishing scam but the question remains as to who is phishing for what. As previously reported, this site connects to the Internet by way of “unknown.dn.net”. A check of the name server for dn.net shows two widely varying IP’s for ns1 and ns2 but both appear to be operating off the same physical machine so it’s a good bet that anything they are serving is part of the same physical network. There is absolutely no information available when you Google “unknown.dn.net” but a check of dn.net shows that they are also the name server for iranlifestyle.com and teenthumbs.com

I must admit I have very little interest in the new Iranian Lifestyle but I just had to go and find out what a go to jail type website like teenthumbs.com had to offer. Utterly amazing this site is a clone of Femalesex.com, Naked.com, raunchy.com, and orgie.com which all rely on cnomy.com for their pictures and javascript as does teenthumbs.com. Regular readers will recognize that after I was tagged by Carnivore, femalesex.com offered links to child sexual abuse and Arab porn.

So is it an accident that both IslamOnLine and Teenthumbs connect to the Internet through the same feed and Muslims really are spying on me?

Or, is the phishing site really a Homeland Security Honeypot spying on all Muslims who visit IslamOnLine.net inorder to offer up kiddie porn and Arab porn to anybody they find guilty of seditious behavior.

PS For those who don’t know, Halal are lifestyle rules similar but more inclusive than Kosher but trying to figure out what’s Kosher about http://198.65.147.194/english/index.shtml and teenthumbs.com will probably take more time than I care to invest.

4 Responses to “Halal Porn or Phishing??”

  1. salahudin Says:

    so… they’re just using the same name servers? that’s not a link to pron…

  2. fatsavage Says:

    They were using the same name server at the same physical location and the address was characteristic of a phishing address.

    http://198.65.147.194 will take you to a visual depiction of IslamOnLine but I have no way of knowing if this is the real site or not since that IP is not registered to them.

  3. fatsavage Says:

    Second thoughts for Salahudin:

    Let’s assume you are correct and there is no link to porn – What right does IslamOnLine have to spy on me. Why are “Islamic thought police” connected to my machine.

  4. salahudin Says:

    “Why are “Islamic thought police” connected to my machine.”

    i dunno. *shrug* ask em!

    (am i detecting mis-directed hostility here? :P)

    so the name servers are at the same physical location…? or do you mean the webservers are as well? if so… so they’re using the same hosts… that’s not a connection. i was hoping there WOULD be though… it would’ve been a riot! lol

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s


%d bloggers like this: