Delivery-Date: Tue, 18 Nov 2014 00:30:57 -0500
Return-Path: <tor-talk-bounces@lists.torproject.org>
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on moria.seul.org
X-Spam-Level: 
X-Spam-Status: No, score=-4.7 required=5.0 tests=BAYES_00,DKIM_ADSP_CUSTOM_MED,
	DKIM_SIGNED,FREEMAIL_FROM,RCVD_IN_DNSWL_MED,RP_MATCHES_RCVD,T_DKIM_INVALID
	autolearn=ham version=3.3.1
X-Original-To: archiver@seul.org
Delivered-To: archiver@seul.org
Received: from eugeni.torproject.org (eugeni.torproject.org [38.229.72.13])
	(using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by khazad-dum.seul.org (Postfix) with ESMTPS id D1E371E04F4;
	Tue, 18 Nov 2014 00:30:55 -0500 (EST)
Received: from eugeni.torproject.org (localhost [127.0.0.1])
	by eugeni.torproject.org (Postfix) with ESMTP id DCB6A31BFF;
	Tue, 18 Nov 2014 05:30:48 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
 by eugeni.torproject.org (Postfix) with ESMTP id 2AD1F3195B
 for <tor-talk@lists.torproject.org>; Tue, 18 Nov 2014 05:30:45 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at 
Received: from eugeni.torproject.org ([127.0.0.1])
 by localhost (eugeni.torproject.org [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id 1yh9tRcOs2lI for <tor-talk@lists.torproject.org>;
 Tue, 18 Nov 2014 05:30:45 +0000 (UTC)
Received: from mail-ie0-x236.google.com (mail-ie0-x236.google.com
 [IPv6:2607:f8b0:4001:c03::236])
 (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits))
 (Client CN "smtp.gmail.com",
 Issuer "Google Internet Authority G2" (not verified))
 by eugeni.torproject.org (Postfix) with ESMTPS id 0482B31950
 for <tor-talk@lists.torproject.org>; Tue, 18 Nov 2014 05:30:45 +0000 (UTC)
Received: by mail-ie0-f182.google.com with SMTP id x19so1410790ier.13
 for <tor-talk@lists.torproject.org>; Mon, 17 Nov 2014 21:30:42 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113;
 h=mime-version:date:message-id:subject:from:to:content-type;
 bh=/ZEv/l1e8vab7N66TDAwt1F6/8h0375gExGJGFYClQE=;
 b=UOSdRIdz1f+/V9INzxCfr2IsnudhHdsNOCI1uk0hZH/bO5yQGLFh7bqBXIrlEC7p9d
 XTflh/mL5f3iswty559Qe3zXQiEvldRAjTxAVFcrwj9W6li8ZPRWX/DFnMk6A/Zgn755
 ySAdtW0lJc+Y+Pds6wNDkZrulJjkc04p7CKbAokYoBqa/gD3RFHYGUgqkOBZH8gUg0bX
 wsBfSbxqdEoGA3ZUfrgUgJ3Aw4eBtwBsU0gkHQyvHUZVW8aWuFmdzAbzTr1Y/KlIWWrD
 8Ohc2rqyU7dps5LaYikNgm62U3qnmNPoIEBb7IS6RsnedfYl302sZXHytuk9ueuMgjRo
 BkPg==
MIME-Version: 1.0
X-Received: by 10.50.142.104 with SMTP id rv8mr30861056igb.23.1416288642623;
 Mon, 17 Nov 2014 21:30:42 -0800 (PST)
Received: by 10.107.160.78 with HTTP; Mon, 17 Nov 2014 21:30:42 -0800 (PST)
Date: Tue, 18 Nov 2014 16:30:42 +1100
Message-ID: <CAM95Lej7t8bWRzsTLGe6Egyxc81TtWNRKmOJ+kbg9mVn8Z5ueg@mail.gmail.com>
From: Nik Cubrilovic <nikcub@gmail.com>
To: tor-talk@lists.torproject.org
Subject: [tor-talk] 276 seized onion addresses from Operation Onymous
 identified - most are scam or clone sites
X-BeenThere: tor-talk@lists.torproject.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: tor-talk@lists.torproject.org
List-Id: "all discussion about theory, design,
 and development of Onion Routing" <tor-talk.lists.torproject.org>
List-Unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
List-Archive: <http://lists.torproject.org/pipermail/tor-talk/>
List-Post: <mailto:tor-talk@lists.torproject.org>
List-Help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-Subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: tor-talk-bounces@lists.torproject.org
Sender: "tor-talk" <tor-talk-bounces@lists.torproject.org>

We identified 276 onion addresses as being seized as part of Operation
Onymous. Of those, 153 were either scam sites or clones. A number of
phishing or clone version of websites were seized while the real
websites remain live. Full results and list of onion sites:

https://www.nikcub.com/posts/onymous-part1/

This suggests that the operation was less targeted than law
enforcement suggested, and was more a sweep of a number of popular
Tor-friendly hosts.

Nik
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

