Translate

Posts mit dem Label Washington State werden angezeigt. Alle Posts anzeigen
Posts mit dem Label Washington State werden angezeigt. Alle Posts anzeigen

5/16/2014

Washington State ONLINE CHILD PREDATORS 2011:
Leif O’Neil Christensen

Sentenced to 13 Years in Federal Prison
For Child Pornography And Gun Possession


Defendant Had 2006 State Convictions for Possession of Child Pornography

A Skagit County felon was sentenced today in U.S. District Court in Seattle to 13 years in prison for possession of child pornography and being a felon in possession of a firearm, announced U.S. Attorney Jenny A. Durkan. Leif O’Neil Christensen, 32, of Anacortes, Washington, had been convicted in 2006 in Snohomish County of possession of child pornography. Due to that conviction, Christensen faced a 10-year mandatory minimum sentence and was prohibited from possessing a firearm. U.S. District Judge James L. Robart imposed 20 years of supervised release following the prison term.

Jenny A. Durkan
Christensen came to the attention of law enforcement in February 2010 when an FBI agent working online in an undercover capacity identified an Internet protocol (IP) address that was using peer-to-peer file sharing software to distribute child pornography. The IP address was linked to Christensen. As officers were preparing search warrants, Christensen was arrested for failing to register as a sex offender.

In December 2010, a second investigation led to a different IP address associated with Christensen in Anacortes, Washington. In March 2011, law enforcement searched that home and found both child pornography and a Ruger firearm in Christensen’s living space. Christensen was arrested. He was indicted in October 2011 and pleaded guilty in January 2012.

In asking for a 15-year sentence, prosecutors wrote to the court that Christensen’s criminal history “reveals a combustible mix of sexual deviancy, violence, poor impulse control, and drug abuse and addiction. He has admitted to molesting three boys when he was in his late teens and early 20s.

The abuse he suffered as a child undoubtedly affected him and most likely contributed to his current criminal history and the instant offense. Understanding his background may help explain his situation somewhat, but it does not mitigate the danger that he poses now, to the community at large, and to young children that he might meet. The overriding concern is that the defendant be prevented from molesting another boy.”

Direct Link Source

4/08/2014

Potentially MALICIOUS ADVERTISER:
Heuristic.LooksLike.HTML.Suspicious-URL.K
@
gaastraproshop.com (m.gaastraproshop.com)
IP: 65.52.130.250 UNITED STATES

FOR WEBMASTERS & BLOGGERS
If you own a Website or a Blog and are affiliated with Google AdSense, in order to your own Reputation, should block the Domain gaastraproshop.com (m.gaastraproshop.com) in your AdSense Dashboard. The Site is potentially Blacklisted. See the following Report:


POTENTIALLY MALICIOUS ADVERTISING DOMAIN:
Heuristic.LooksLike.HTML.Suspicious-URL.K & HIDDEN IFRAMES

DOMAIN:
http://www.gaastraproshop.com/
  • https://www.virustotal.com/de/url/8fe4129403e2f8a3329f8e8c2c030a8e071aa0ca416e83db22bbf2647a9b9354/analysis/1396956156/
HTML (before REDIRECTION) Heuristic.LooksLike.HTML.Suspicious-URL.K
  • https://www.virustotal.com/de/file/bd2bbbc521c2ef59397a0d0094451a2f1c978c88ee3f408a796071a58a733476/analysis/1396956097/
HTML (after REDIRECTION TO: http://m.gaastraproshop.com/ )
  • https://www.virustotal.com/de/url/9b672b89952372844701c6eaee854ac53baed519cf854c2d76f7027e8509ac46/analysis/1396956311/
  • https://www.virustotal.com/de/file/5a7ac6c9a4573c03f9d3b78278854f8eeb77300b41013769849f9593b61cdc10/analysis/

AD-LINK:
http://www.googleadservices.com/pagead/aclk?sa=L&ai=C9_qImM1DU5zaMMyR7ga_pIGgD-7TzuYDzuLHuJsBwI23ARABII7AlCNQuuWsjQNguwOgAczZxPUDyAECqQJouv3HAA-3PqgDAcgDwQSqBK0BT9BVRjDmVncwPOaYlYqDgq5ewlrE62ZKg0EI3bGzSTS2RY4AcjI1uPQNsHaT4rugdrGcIj5NrDkcP7WvV3x2WuALeS2pfl45Vy5x8WsjjQJyAGpQLLToRLzbxcQM41r1VIRWE8sXrd471wq5qDA1D1yV2v7JUSCrkTyQapMs3-HduhxiXs_1faUi_uZDXGoSpta2LFNFHiVzbqL7spmvDb14LM8BdBc3Ht1CYHmIBgGgBgKAB5ymuwo&num=1&cid=5Ghek0AXvKdmiT_PaZgyrXhR&sig=AOD64_1HNWVDpsJ2tiouym8BUaG8D7D4nw&client=ca-pub-5585202032329389&adurl=http://www.gaastraproshop.com/com-en/&nm=3&mb=2&bg=!A0QdcMC5dYUeWQIAAAA5UgAAACwqAOEto0uFWoyzbF9BgLpTZd0j0HlH_C56hY4NLvc3NtowaaH-Z-csGgTuThLZ2700ImAxJCtXBWy07lw2lhyW729LbQpRbKOUhBOCgNPTzNU7gGGfUbNk7f1Es-R1OT2rxWGFmICxmADsYZbJkCp3x90QW9x_krZl8PbIDV5TojB9Z4tmta85i7Np_800PxgiPJJfwWvSEdIldac4iEnohF9kF7b9tuMjUDC-jxzvmThXXObWG5HuPVidMyu5kw1D6sjILopgRn4ifnP6aV0gn8heXTWUH6sXVSlhTfbA-94Jv2Y
  • https://www.virustotal.com/de/url/62eb0a95606957e05b738baee9c886cb70a5e34c5e23659bbf4d96dc14ca3df1/analysis/1396955224/
(HTML-SRC) Heuristic.LooksLike.HTML.Suspicious-URL.K
  • https://www.virustotal.com/de/file/567b8090d9678ab59051c8039a8ee4db6219e30ddc833fc417e74ce75d051dd1/analysis/1396955699/
URL AFTER REDIRECT:
http://www.gaastraproshop.com/com-en/?gclid=COiest_f0L0CFeY-MgodzxsAfw
  • https://www.virustotal.com/de/url/8e9706ee82cfd4bafcde4bb245ce1dd2798c2e1bb7d35e914015246b70eb1f1c/analysis/
(HTML-SRC) Heuristic.LooksLike.HTML.Suspicious-URL.K
  • https://www.virustotal.com/de/file/476be34d21b40a8ebc9eedf9bfd0b59a671735cac2517af1e007cdabf9860d80/analysis/1396955811/
IP:
http://65.52.130.250/
  • https://www.virustotal.com/de/url/153ecf2fa49f6cfa49c849cdadf0abea1ca0d4ea9d299e1ce04c837d83c498ad/analysis/1396957138/

4/04/2014

Web me up before you gogo
SUSPICIOUS GOOGLE ADs:
webmeup.com (IP: 216.176.184.89)
Hidden Iframes (W32.HfsIframe) & a Bad Reputation on itself
Seattle, Washington State, United States

FOR WEBMASTERS
If you own a Website or a Blog and are affiliated with Google AdSense, in order to your own Reputation, should block the Domain webmeup.com in your AdSense Dashboard. The Site is Suspicious and at some Places flagged as Blacklisted. See the following Report:


SUSPICIOUS AD:
HIDDEN IFRAMES & BAD REPUTATION DOMAIN

URL:
http://www.googleadservices.com/pagead/aclk?sa=L&ai=Cy6O_ik89U_CEIeOI7gaK9oDIC72808sEnfip6VSUxIHcPhABII7AlCNQ2ZS9zf7_____AWC7A6ABi_in2QPIAQGpAjqXAXKKNF4-qAMByAPDBKoElwFP0IxRSJTVZjBsIIh_UKvd2TUxunzo_S1-mT0bHH-6aHVMkkt0bf8N7C2RN54CvduFy5uquln0IlzMKJqSFKoPSOjT4wI4wfZX1JOl4RJFud_YtgI0WUPm5xKyKxk1LEwtTHbKNpyitjQ3LvBuTqA2CSCF3ii18QrtPmozmjPlgRoqj5J3xIvApdowzXB4Diw-IBq5abxBiAYBgAfdh9gm&num=1&cid=5Gg4hurKMkl83P4fAziMfmtH&sig=AOD64_0VkVLWrxlHQohYi1xoDo9ter1sUA&client=ca-pub-5585202032329389&adurl=http://webmeup.com/offers/keywords.html&nm=11&mb=2&bg=!A0Trb4WEKT6hggIAAABDUgAAACwqAOFBSmCeDMOoMHIYzFuNtFz1qHErfwXeeDTD1dx8byzTqOLoPcTOxQnJpNBmlBOscGglXLvKqjWa2C_7QhuO0AJxGI4QiECd7jJaWLGzQyxDdwbUAPhfVaxLM1jcnU6fLcnuRbtaNTSc9ZYJMO6W8r9PZIEV9Y7o3f0OecWCHjPbVpqbxdNbnNSk4XGCtSKOtdY6ixbZUkTlQQmuKzmfAYcfj8sbbzQGX_G4ZfTgvOfKh1JelRWzc9vVA6Pf-gXn6vJGlR_Gv-_iDYCHtQo2Q3kCk-T8PCaagzw3O_J8gGbPNlE

  • https://www.virustotal.com/de/url/c33ad49edc713f5ff2af1d58ba81dd71b4aa4332280ae8e291ac0fe4dec3b887/analysis/1396530528/
---> Goes to
http://webmeup.com/offers/keywords.html?gclid=COG_6tCxxL0CFa5DMgody3IASw
  • https://www.virustotal.com/de/url/fa1117992d0c80fa00883fe425a759a3c828905344fd1bb7a87b19e95111c3bc/analysis/
DOMAIN ITSELF:
http://webmeup.com/
  • https://www.virustotal.com/de/url/d895fbc6abbc712a6a4369b9c48872faab1298a3dfbf9373b187fbe4728374f5/analysis/
W32.HfsIframe.018f (HfsIframe means HIDDEN IFRAME (Bavk))
  • https://www.virustotal.com/de/file/0f5bfa6ed4473ac57bf830b535e8a405b40e0546066f720c21a51fcb1a9940b4/analysis/1396530855/
  • https://www.virustotal.com/de/file/e706e43d9aaea8a11e559b98b5f5d16bad4e2a093bf39527a3e61751ac180480/analysis/1396530988/
HIDDEN IFRAMES (EXAMPLE)
http://webmeup.com/seo-tools-review/index.html
REDIRECTS To:
http://webmeup.com/seo-tools-review/
  • https://www.virustotal.com/de/url/788897b0ba28cf358d0093795fc903f827dfb8c4d170bff954ded9bbbed0b7a2/analysis/1396532538/
W32.HfsIframe.47db
  • https://www.virustotal.com/de/file/94fab1782e1291c9732eed4a91b76548493b54bf23d30945dbd7eba2d13ef355/analysis/1396532239/
OTHER HIDDEN IFRAMES SEE SCREENSHOT:

Screenshot
IP:
http://216.176.184.89/
  • https://www.virustotal.com/de/url/317d8c56e1517093d04b96162e0b4bc2155aa8d24abe5ea2790de2d150abf121/analysis/1396533149/
  • https://www.virustotal.com/de/ip-address/216.176.184.89/information/

12/06/2013

Caran Johnson Unknowingly Live-Tweets Husband's Death While Following Car Crash News


In an heartbreaking sad unfolding of events, a Vancouver woman unwillingly live-tweeted the fatal crash that killed her husband Wednesday afternoon on Interstate 205.

Caran Johnson
After the collision was reported at 13:41, The Columbian started reporting on the accident in the southbound lanes on Twitter based on emergency scanner traffic.

Caran Johnson, using the Twitter handle @scancouver, responded to the tweets and started reporting on the crash as well:

“i hate that section of I205 S. too many on ramps, speeders and too few lanes.”


“@troyglidden @Col_cops this accident sounds horrible.”

The mother of two regularly listens in on emergency scanner traffic through an application downloaded on her PC. Wednesday afternoon was no exception. She expressed sympathy after the
Washington State Patrol confirmed that one person died in the two-car collision near Milepost 33.

“@Col_cops @wspd5pio omg that is so horrible!!!”

“nice, two vehicles went around officer blocking onramp to I205S. lame-o’s!”

Craig Johnson
Then, she worried about her husband, 47-year-old Craig R. Johnson.

“I’m trying not to panic, but my husband left work early and he drives 205 to get home. he’s not answering his phone.”

“and he’s late.”

“@KF7PSC well he uses his bluetooth, so he would answer his phone. he also wasn’t feeling good so his work was concerned when he left”

“i’m a basketcase.”

“I just called his work and he was feeling faint when he left work. #panic”

She asked the state patrol’s spokesman, Trooper Will Finn, and The Columbian’s photographer who went to the accident site, Zachary Kaufman, for a description of the involved vehicles. At that point in the investigation, they didn’t have a description for her.

  1. Trooper Will Finn
She asked how bad the traffic was on the interstate. The right lane of the southbound interstate was closed, along with the onramp from westbound Padden Parkway. The Washington State Department of Transportation then said the southbound interstate was backed up to 134th Street in Salmon Creek.

“how long do i wait for him to come home before I call the police?”

“i just called 911 and they transferred me after I gave them his license number and told me that they will call me back. wtf?”

“and now my kids are home from school …”

“He’s the one I go to for things like this …”

And then, she found out from a pair of state patrol sergeants.

“it’s him. he died.”



Craig Johnson’s northbound Hyundai crossed the grassy median just north of Padden Parkway and collided head-on with a southbound Toyota pickup truck. He was declared dead at the scene. A Life Flight helicopter was temporarily put on standby for the Tacoma woman driving the Toyota, Carol S. Shelley, 54. She was transported by ambulance to PeaceHealth Southwest Medical Center’s intensive care unit. She was listed in satisfactory condition late Wednesday..

After collision technicians investigated the crash site for about two hours, the interstate and onramp were reopened. The cause of the collision is under investigation.

“We’re not quite sure what’s happened yet,” the patrol’s Finn said.

Fellow tweeters extended their prayers and sympathies to Caran Johnson, virtually grieving alongside her. An online fundraiser was organized Wednesday evening for Caran and her family.



In a 2012 interview with The Columbian, she said that she has been listening to scanners since college.

She acknowledged that listening to scanner traffic can be morose. As a naturally upbeat person, she tries to focus on the banter among police officers and offbeat news.

“It gets kind of depressing, especially when there are children involved,” she said in the interview. “I try and maintain a positive attitude.”

SOURCE: The Columbian

12/02/2013

Man in the Middle Attack made a 1.65 Million US Dollar Profit for Victimizing Three Businesses 2013

Three Seattle-Area Businesses Targeted in 2013

The FBI Seattle Field Office is aware of a fraud victimizing Washington state-based businesses, nicknamed “Man-in-the-e-mail”-Scheme for being an e-mail variation of a known “man-in-the-middle” attack. The FBI wants the public to learn about this scam in order to avoid being victimized.

In 2013, at least three area companies (in Bellevue, Tukwila, and Seattle) were led to believe they were sending money to an established supply partner in China. Fact is, fraudsters intercepted legitimate e-mails between the purchasing and supply companies and then spoofed subsequent e-mails impersonating each company to the other. The fraudulent e-mails directed the purchasing companies to send payments to a new bank account because of a purported audit. The bank accounts belonged to the fraudsters, not the supply companies.



Total loss experienced by the three area companies is roughly 1.65 million USD. In some cases, the metadata on the spoofed e-mails indicated that they actually originated in Nigeria and/or South Africa.

Under this scam, both companies in a legitimate business relationship can be victimized. The supplier may first ship out the legitimately ordered products and then never receive payment (because the purchasing company was scammed into paying the scammer-controlled bank account). Or, the purchasing company may first make a payment and then never receive the ordered goods (because the supply company never receives that payment).