0
1

[–] islandofdelight 0 points 1 point (+1|-0) ago 

FBI has many offices in Virginia: http://www.countyoffice.org/washington-va-fbi-office/

Worldcorpo is FBI white hats evidence leak.

0
1

[–] dickface888 0 points 1 point (+1|-0) ago 

Wasn't the concensus recently that the worldcorp video was a troll job edited together?

0
2

[–] Notgood2 0 points 2 points (+2|-0) ago 

That is bullcrap! Do you think a kid can fake screaming like that?

0
1

[–] 9347195? 0 points 1 point (+1|-0) ago 

0
1

[–] Emergence1 0 points 1 point (+1|-0) ago  (edited ago)

Hypothetically alternate names:

http://www.databucket.info/

http://edu.run/content/images/

http://workfacer.com/

Here's a good list: https://voat.co/v/pizzagate/1653341

Looks like a bunch of various redirects to the same site and a couple misc sites on the same server.

hmm. https://pastebin.com/RVibxA6h probably before they took it over most of the sites appeared in 2016

misc other shit: Owner: 陈朝阳 Hosting company: New Dream Network, LLC Registrar: China NIC IPs: 208.113.128.159 DNS: ns1.22.cn ns2.22.cn 500nianqian@gmail.com

-not helpful

0
0

[–] 9347225? ago  (edited ago)

What are the images of ? I don't want to click on them

0
0

[–] collegetoker [S] ago  (edited ago)

Databucket.info

92.242.140.255 - 51.4964,-0.1224 - United Kingdom

Starting Nmap 7.40 ( https://nmap.org ) at 2017-05-31 03:44 EDT
Nmap scan report for databucket.info (208.113.128.159)
Host is up (0.079s latency).
rDNS record for 208.113.128.159: ip-208-113-128-159.nodes.dream.io

Host script results:
| dns-brute: 
|   DNS Brute-force hostnames: 
|     devel.databucket.info - 92.242.140.21
|     stats.databucket.info - 92.242.140.21
|     http.databucket.info - 92.242.140.21
|     mx0.databucket.info - 92.242.140.21
|     development.databucket.info - 92.242.140.21
|     svn.databucket.info - 92.242.140.21
|     syslog.databucket.info - 92.242.140.21
|     id.databucket.info - 92.242.140.21
|     devsql.databucket.info - 92.242.140.21
|     test.databucket.info - 92.242.140.21
|     mysql.databucket.info - 92.242.140.21
|     devtest.databucket.info - 92.242.140.21
|     info.databucket.info - 92.242.140.21
|     alerts.databucket.info - 92.242.140.21
|     dhcp.databucket.info - 92.242.140.21
|     test1.databucket.info - 92.242.140.21
|     alpha.databucket.info - 92.242.140.21
|     noc.databucket.info - 92.242.140.21
|     test2.databucket.info - 92.242.140.21
|     internet.databucket.info - 92.242.140.21
|     ap.databucket.info - 92.242.140.21
|     dmz.databucket.info - 92.242.140.21
|     testing.databucket.info - 92.242.140.21
|     apache.databucket.info - 92.242.140.21
|     ns0.databucket.info - 92.242.140.21
|     upload.databucket.info - 92.242.140.21
|     app.databucket.info - 92.242.140.21
|     vm.databucket.info - 92.242.140.21
|     ipv6.databucket.info - 92.242.140.21
|     apps.databucket.info - 92.242.140.21
|     vnc.databucket.info - 92.242.140.21
|     lab.databucket.info - 92.242.140.21
|     aptest.databucket.info - 92.242.140.21
|     linux.databucket.info - 92.242.140.21
|     en.databucket.info - 92.242.140.21
|     auth.databucket.info - 92.242.140.21
|     ops.databucket.info - 92.242.140.21
|     web.databucket.info - 92.242.140.21
|     erp.databucket.info - 92.242.140.21
|     oracle.databucket.info - 92.242.140.21
|     web2test.databucket.info - 92.242.140.21
|     log.databucket.info - 92.242.140.21
|     eshop.databucket.info - 92.242.140.21
|     beta.databucket.info - 92.242.140.21
|     owa.databucket.info - 92.242.140.21
|     whois.databucket.info - 92.242.140.21
|     blog.databucket.info - 92.242.140.21
|     pbx.databucket.info - 92.242.140.21
|     wiki.databucket.info - 92.242.140.21
|     f5.databucket.info - 92.242.140.21
|     cdn.databucket.info - 92.242.140.21
|     s3.databucket.info - 92.242.140.21
|     www.databucket.info - 208.113.128.159
|     secure.databucket.info - 92.242.140.21
|     www2.databucket.info - 92.242.140.21
|     firewall.databucket.info - 92.242.140.21
|     citrix.databucket.info - 92.242.140.21
|     xml.databucket.info - 92.242.140.21
|     forum.databucket.info - 92.242.140.21
|     cms.databucket.info - 92.242.140.21
|     shop.databucket.info - 92.242.140.21
|     manage.databucket.info - 92.242.140.21
|     ftp.databucket.info - 208.113.128.159
|     mgmt.databucket.info - 92.242.140.21
|     crs.databucket.info - 92.242.140.21
|     mirror.databucket.info - 92.242.140.21
|     git.databucket.info - 92.242.140.21
|     cvs.databucket.info - 92.242.140.21
|     sql.databucket.info - 92.242.140.21
|     mobile.databucket.info - 92.242.140.21
|     gw.databucket.info - 92.242.140.21
|     database.databucket.info - 92.242.140.21
|     squid.databucket.info - 92.242.140.21
|     monitor.databucket.info - 92.242.140.21
|     help.databucket.info - 92.242.140.21
|     db.databucket.info - 92.242.140.21
|     ssh.databucket.info - 92.242.140.21
|     mssql.databucket.info - 92.242.140.21
|     helpdesk.databucket.info - 92.242.140.21
|     demo.databucket.info - 92.242.140.21
|     ssl.databucket.info - 92.242.140.21
|     mta.databucket.info - 92.242.140.21
|     home.databucket.info - 92.242.140.21
|     dev.databucket.info - 92.242.140.21
|_    stage.databucket.info - 92.242.140.21

Nmap done: 1 IP address (1 host up) scanned in 2.95 seconds

% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
%       To receive output for a database update, use the "-B" flag.

% Information related to '92.242.140.0 - 92.242.140.255'

% Abuse contact for '92.242.140.0 - 92.242.140.255' is 'abuse@barefruit.co.uk'

inetnum:        92.242.140.0 - 92.242.140.255
netname:        BAREFRUIT-ERRORHANDLING
descr:          BAREFRUIT-US-ANYCAST-A
country:        GB
org:            ORG-BL53-RIPE
admin-c:        PR42-RIPE
tech-c:         PR42-RIPE
status:         ASSIGNED PA
mnt-by:         CATALYST2-MNT
created:        2008-03-11T16:59:41Z
last-modified:  2008-07-24T17:13:47Z
source:         RIPE

organisation:   ORG-BL53-RIPE
org-name:       Barefruit Ltd.
org-type:       LIR
address:        5 Windmill Street
address:        London
address:        W1T 2JA
address:        UNITED KINGDOM
phone:          +44 207 637 0304
admin-c:        PR42-RIPE
mnt-ref:        CATALYST2-MNT
mnt-ref:        RIPE-NCC-HM-MNT
mnt-by:         RIPE-NCC-HM-MNT
mnt-by:         CATALYST2-MNT
abuse-c:        BA5057-RIPE
created:        2007-12-14T12:37:34Z
last-modified:  2016-09-28T10:03:34Z
source:         RIPE # Filtered

person:         Paul Redpath
remarks:        Catalyst2 Services Ltd
org:            ORG-csl3-RIPE
address:        Forsyth House
address:        Cromac Square
address:        Belfast
address:        BT2 8LA
phone:          +44 800 107 7979
fax-no:         +44 845 280 4993
abuse-mailbox:  abuse@catalyst2.com
mnt-by:         CATALYST2-MNT
created:        2004-01-12T14:35:03Z
last-modified:  2014-01-14T15:15:38Z
source:         RIPE # Filtered
nic-hdl:        PR42-RIPE

% Information related to '92.242.140.0/24AS45028'

route:          92.242.140.0/24
descr:          BF-MC-1
origin:         AS45028
mnt-by:         CATALYST2-MNT
created:        2008-04-23T11:52:47Z
last-modified:  2008-04-23T11:52:47Z
source:         RIPE

0
0

[–] collegetoker [S] ago  (edited ago)

http://edu.run

39.018,-77.539 - Ashburn, Virginia, United States



#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/public/whoisinaccuracy/index.xhtml
#


#
# The following results may also be obtained via:
# https://whois.arin.net/rest/nets;q=208.113.128.159?showDetails=true&showARIN=false&showNonArinTopLevelNet=false&ext=netref2
#

NetRange:       208.113.128.0 - 208.113.255.255
CIDR:           208.113.128.0/17
NetName:        DREAMHOST-BLK6
NetHandle:      NET-208-113-128-0-1
Parent:         NET208 (NET-208-0-0-0-0)
NetType:        Direct Allocation
OriginAS:       
Organization:   New Dream Network, LLC (NDN)
RegDate:        2006-04-12
Updated:        2012-03-02
Ref:            https://whois.arin.net/rest/net/NET-208-113-128-0-1


OrgName:        New Dream Network, LLC
OrgId:          NDN
Address:        417 Associated Rd.
Address:        PMB #257
City:           Brea
StateProv:      CA
PostalCode:     92821
Country:        US
RegDate:        2001-04-16
Updated:        2017-01-28
Comment:        Address location was created regardless of geographic location.
Ref:            https://whois.arin.net/rest/org/NDN


OrgNOCHandle: NETOP274-ARIN
OrgNOCName:   NetOPs
OrgNOCPhone:  +1-714-706-4182 
OrgNOCEmail:  netops@dreamhost.com
OrgNOCRef:    https://whois.arin.net/rest/poc/NETOP274-ARIN

OrgAbuseHandle: DAT5-ARIN
OrgAbuseName:   DreamHost Abuse Team
OrgAbusePhone:  +1-714-706-4182 
OrgAbuseEmail:  abuse@dreamhost.com
OrgAbuseRef:    https://whois.arin.net/rest/poc/DAT5-ARIN

OrgTechHandle: NETOP274-ARIN
OrgTechName:   NetOPs
OrgTechPhone:  +1-714-706-4182 
OrgTechEmail:  netops@dreamhost.com
OrgTechRef:    https://whois.arin.net/rest/poc/NETOP274-ARIN


Host script results:
| dns-brute: 
|   DNS Brute-force hostnames: 
|     mx.edu.run - 208.113.128.159
|     admin.edu.run - 208.113.128.159
|     host.edu.run - 208.113.128.159
|     devel.edu.run - 208.113.128.159
|     stats.edu.run - 208.113.128.159
|     http.edu.run - 208.113.128.159
|     mx0.edu.run - 208.113.128.159
|     development.edu.run - 208.113.128.159
|     administration.edu.run - 208.113.128.159
|     svn.edu.run - 208.113.128.159
|     mx1.edu.run - 208.113.128.159
|     devsql.edu.run - 208.113.128.159
|     id.edu.run - 208.113.128.159
|     ads.edu.run - 208.113.128.159
|     mysql.edu.run - 208.113.128.159
|     syslog.edu.run - 208.113.128.159
|     images.edu.run - 208.113.128.159
|     devtest.edu.run - 208.113.128.159
|     adserver.edu.run - 208.113.128.159
|     test.edu.run - 208.113.128.159
|     news.edu.run - 208.113.128.159
|     info.edu.run - 208.113.128.159
|     dhcp.edu.run - 208.113.128.159
|     alerts.edu.run - 208.113.128.159
|     test1.edu.run - 208.113.128.159
|     noc.edu.run - 208.113.128.159
|     internal.edu.run - 208.113.128.159
|     alpha.edu.run - 208.113.128.159
|     ns.edu.run - 208.113.128.159
|     direct.edu.run - 208.113.128.159
|     ap.edu.run - 208.113.128.159
|     test2.edu.run - 208.113.128.159
|     internet.edu.run - 208.113.128.159
|     ns0.edu.run - 208.113.128.159
|     dmz.edu.run - 208.113.128.159
|     apache.edu.run - 208.113.128.159
|     testing.edu.run - 208.113.128.159
|     intra.edu.run - 208.113.128.159
|     ns1.edu.run - 208.113.128.159
|     dns.edu.run - 208.113.128.159
|     app.edu.run - 208.113.128.159
|     upload.edu.run - 208.113.128.159
|     intranet.edu.run - 208.113.128.159
|     ns2.edu.run - 208.113.128.159
|     vm.edu.run - 208.113.128.159
|     dns0.edu.run - 208.113.128.159
|     ipv6.edu.run - 208.113.128.159
|     ns3.edu.run - 208.113.128.159
|     apps.edu.run - 208.113.128.159
|     vnc.edu.run - 208.113.128.159
|     dns1.edu.run - 208.113.128.159
|     ntp.edu.run - 208.113.128.159
|     lab.edu.run - 208.113.128.159
|     appserver.edu.run - 208.113.128.159
|     voip.edu.run - 208.113.128.159
|     dns2.edu.run - 208.113.128.159
|     ops.edu.run - 208.113.128.159
|     ldap.edu.run - 208.113.128.159
|     aptest.edu.run - 208.113.128.159
|     vpn.edu.run - 208.113.128.159
|     download.edu.run - 208.113.128.159
|     oracle.edu.run - 208.113.128.159
|     linux.edu.run - 208.113.128.159
|     auth.edu.run - 208.113.128.159
|     web.edu.run - 208.113.128.159
|     en.edu.run - 208.113.128.159
|     local.edu.run - 208.113.128.159
|     owa.edu.run - 208.113.128.159
|     web2test.edu.run - 208.113.128.159
|     erp.edu.run - 208.113.128.159
|     backup.edu.run - 208.113.128.159
|     log.edu.run - 208.113.128.159
|     pbx.edu.run - 208.113.128.159
|     eshop.edu.run - 208.113.128.159
|     whois.edu.run - 208.113.128.159
|     beta.edu.run - 208.113.128.159
|     s3.edu.run - 208.113.128.159
|     mail.edu.run - 208.113.128.159
|     exchange.edu.run - 208.113.128.159
|     wiki.edu.run - 208.113.128.159
|     blog.edu.run - 208.113.128.159
|     secure.edu.run - 208.113.128.159
|     mail2.edu.run - 208.113.128.159
|     f5.edu.run - 208.113.128.159
|     www.edu.run - 208.113.128.159
|     cdn.edu.run - 208.113.128.159
|     mail3.edu.run - 208.113.128.159
|     server.edu.run - 208.113.128.159
|     fileserver.edu.run - 208.113.128.159
|     chat.edu.run - 208.113.128.159
|     www2.edu.run - 208.113.128.159
|     mailgate.edu.run - 208.113.128.159
|     shop.edu.run - 208.113.128.159
|     firewall.edu.run - 208.113.128.159
|     citrix.edu.run - 208.113.128.159
|     xml.edu.run - 208.113.128.159
|     main.edu.run - 208.113.128.159
|     sip.edu.run - 208.113.128.159
|     forum.edu.run - 208.113.128.159
|     cms.edu.run - 208.113.128.159
|     manage.edu.run - 208.113.128.159
|     smtp.edu.run - 208.113.128.159
|     ftp.edu.run - 208.113.128.159
|     corp.edu.run - 208.113.128.159
|     mgmt.edu.run - 208.113.128.159
|     ftp0.edu.run - 208.113.128.159
|     crs.edu.run - 208.113.128.159
|     sql.edu.run - 208.113.128.159
|     mirror.edu.run - 208.113.128.159
|     git.edu.run - 208.113.128.159
|     cvs.edu.run - 208.113.128.159
|     squid.edu.run - 208.113.128.159
|     mobile.edu.run - 208.113.128.159
|     gw.edu.run - 208.113.128.159
|     database.edu.run - 208.113.128.159
|     ssh.edu.run - 208.113.128.159
|     monitor.edu.run - 208.113.128.159
|     help.edu.run - 208.113.128.159
|     db.edu.run - 208.113.128.159
|     ssl.edu.run - 208.113.128.159
|     mssql.edu.run - 208.113.128.159
|     helpdesk.edu.run - 208.113.128.159
|     demo.edu.run - 208.113.128.159
|     stage.edu.run - 208.113.128.159
|     mta.edu.run - 208.113.128.159
|     home.edu.run - 208.113.128.159
|_    dev.edu.run - 208.113.128.159

0
0

[–] Emergence1 ago 

oh yeah those are working. I can't connect to the ftp though.

0
0

[–] Gothamgirl ago 

When you look up WorldCorp Enterprises Channel on youtube they list a few. This video is a dead giveaway of who it is. https://youtu.be/QCdprP2IyV8

0
1

[–] PripyatCalling 0 points 1 point (+1|-0) ago  (edited ago)

My new account.

Let's discuss some stuff. Dorthy

0
0

[–] Gothamgirl ago 

I noticed Dorothy in a video with morse code recently it made me think of this.

0
0

[–] Gothamgirl ago 

That reminds me of something I saw recently.

0
0

[–] Gothamgirl ago 

Honestly it was a guess based off the shirt "All 11 lakes" so I may not be correct. I have been combing all day, but nothing stands out yet.

0
0

[–] Blacksmith21 ago 

Ashburn arguably has more data centers than Silicon Valley. Everyone who hosts is there. Ashburn grew to what it is (data center-wise) because of its proximity to the MAE East NAP and the major fiber routes in NoVA.

Pro Tip: Intel agencies like to build data centers on these rights-of-way.

0
0

[–] DeathTooMasons ago 

Virginia, shocker. So far from DC.

0
0

[–] carmencita ago 

The chance of becoming a victim of either violent or property crime in Brea is 1 in 35. Based on FBI crime data, Brea is not one of the safest communities in America. Relative to California, Brea has a crime rate that is higher than 73% of the state's cities and towns of all sizes. Don't know if this helps any, but with this kind of data, could that be a reason they are located in brea?

0
1

[–] 9355559? 0 points 1 point (+1|-0) ago 

Ok here's a little clip of the inside of the mail place . When I pulled up there was a Ryder truck loading something from the mail place . Notice how the woman referred Me to Fedex? Fedex is literally in the same center and does the same stuff this place claims to do .why wouldn't she want my few hundred dollars worth of business? I will go into the pizza place later after I change my disguise lol.

https://vimeo.com/219765930

0
2

[–] carmencita 0 points 2 points (+2|-0) ago 

Ok I watched. Fishy. Very odd

0
0

[–] collegetoker [S] ago 

That's just where the hosting company is registered. I was providing that in combination with the GPS coordinates in conjunction with the forum post to show that it is in Aushburn Virginia and there is evidence for it being their. I got the location using a reconnaissance toolkit, so I'm not just guessing.

0
0

[–] carmencita ago 

OK, Thanks for research:-)

load more comments ▼ (6 remaining)