A Cryptome DVD is offered by Cryptome. Donate $25 for a DVD of the Cryptome 11-years archives of 41,000 files from June 1996 to June 2007 (~4.4 GB). Click Paypal or mail check/MO made out to John Young, 251 West 89th Street, New York, NY 10024. Archives include all files of cryptome.org, jya.com, cartome.org, eyeball-series.org and iraq-kill-maim.org. Cryptome offers with the Cryptome DVD an INSCOM DVD of about 18,000 pages of counter-intelligence dossiers declassified by the US Army Information and Security Command, dating from 1945 to 1985. No additional contribution required -- $25 for both. The DVDs will be sent anywhere worldwide without extra cost.


11 November 2007

Allan Turnbull (www.secret-bases.co.uk) sends:

I suspect the Latiff.biz website is just yet another manifestation of prolific web entrepreneur:- Mohamad Latiff Bin Rahim ("Mo Latiff", who is listed as the Latiff.biz domain owner).

He is the person behind this infamous money spinner:-

www.ultimatesecretsofsuccess.com

I wonder if he has merely set-up a virtual server that at one stage recently has pointed to the NSA website in an attempt at spoofing. Similarly, he has spoofed Google, which your contributor illustrates in his screen shots.

When I tried accessing http://latiff.biz (without the "www" prefix) I was presented with a login dialogue, naming the much used Linksys WRV54G router box, which I believe can be set-up as a virtual host. Compare with the recent attempt by a UK based web enthusiast who I exposed as the MI5 website hacker:

http://homepage.ntlworld.com/alan-turnbull/secret.htm#spooks

A3 sends:

The "nsa-latiff" file is a snooze.  Anyone can point their domain at someone else's web server.  The www.latiff.biz site isn't hosted on the same network as the NSA's website, it's just an alias for www.nsa.gov. How precious!
% host -t A www.latiff.biz.
www.latiff.biz is an alias for www.nsa.gov.
www.nsa.gov has address 12.110.110.204

My friends and I used to play this exact trick with our domains in the mid-nineties.  Later on, 2600 Magazine famously bought the domain "fordreallysucks.com" and pointed it at the Ford Motor Company's web server.  This is an old game.

Here's another less-than-damning dossier:

http://forums.ngemu.com/open-discussion/72158-google-has-lot-redirect-domains.html#post957255

This guy made the same mistake as your ill-informed tipster, assuming that everyone pointing their domain at Google's web servers is some kind of Google front.

I know you're looking for the next Robert Ellman resume, but this stuff is silly.  The NSA doesn't need to host a fake Google site to monitor your searches, either.

A2 sends:

I've just run that Latiff domain through that excellent Robtex tool you featured a few weeks back. It reveals the Australian Bigpond ISP connection as you also featured back then.

http://www.robtex.com/dns/www.latiff.biz.html

http://www.robtex.com/dns/xlr82xs.yi.org.html

http://www.robtex.com/whois/latiff.biz.html

11 November 2007


A sends:

Subject: More indication of NSA eavesdropping

The following screenshots were taken as of 09:00 PM (GMT-03:00) at November 09, 2007.

There is a VERY suspect domain called "www.latiff.biz", which apparently serves as a mirror (or something else) for Google and Microsoft websites.

At moment the address appeared to be down, although it's still registered (at least until August 29, 2010). And it's really the NSA.

This IP (12.110.110.204) falls within an address space assigned to same obscure and infamous company hosting their website: LinguaLISTek.

I highlighted some interesting details in these images for best understanding of Cryptome readers. Please pay attention in the right side in the third image (nsa-latiff-3.jpg). It's not the Microsoft website (www.microsoft.com) showed in the thumbnail?

Please pay attention in the fourth image too: the same domain is registred with a phony info [name, address, city, contact] (nsa-latiff-4.jpg).

In the sixty and seventh image (nsa-latiff-6.jpg and nsa-latiff-7.jpg) the Internet Archive shows a cache dated April 23, 2006, in which this domain pointed to the Google website (www.google.com).

What it's does mean? Why is the NSA mirroring these webpages? Surprise! Give a look yourselves and make your conclusions.

As always, it wouldn't happen without the knowledge of the respective sysadmins a.k.a "NSA friendly" of course ==> (Microsoft and Google).

NSA-Latiff 1

NSA-Latiff 2

NSA-Latiff 3

NSA-Latiff 4

NSA-Latiff 5

NSA-Latiff 6

NSA-Latiff 7