Wikileaks.info, a site assisting Wikileaks' effort to share US war information and diplomatic cables, is rebutting online security organisations' warnings that its website could be dangerous to visit.

      Wikileaks.info provides a list of sites that mirror the original Wikileaks content. And in recent days the main Wikileaks.org website has redirected visitors to the  Wikileaks.info mirror page. Wikileaks.info has grown in importance because of others' moves two weeks ago that made it difficult to reach Wikileaks.org and led its operators to resurface at Wikileaks.ch, a Swiss domain.

      The Spamhaus Project, a non-profit volunteer organisation that seeks to curtail spam, phishing, botnets for network attacks, and malware, issued a "malware warning" yesterday for Wikileaks.info.

      Wikileaks.info "is hosted in a very dangerous 'neighbourhood', Webalta's 92.241.160.0/19 IP address space, a 'blackhat' network which Spamhaus believes caters primarily to, or is under the control of, Russian cybercriminals", Spamhaus said. "Our concern is that any Wikileaks archive posted on a site that is hosted in Webalta space might be infected with malware. Since the main Wikileaks.org website now transparently redirects visitors to mirror.wikileaks.info and thus directly into Webalta's controlled IP address space, there is substantial risk that any malware infection would spread widely."

      Wikileaks.info strenuously objected to the warning yesterday.

      "We find it very disturbing that Spamhaus labels a site as dangerous without even checking if there is any malware on it. We monitor the Wikileaks.info site and we can guarantee that there is no malware on it," the Wikileaks.info site said.

      Wikileaks.info is only "very loosely" affiliated with the official Wikileaks effort, a Wikileaks.info representative told ZDNet Australia's sister site CNET. "In fact, we were caught [by] surprise on last Saturday as we all of a sudden had 1 million hits per day on our website." The switch — when Wikileaks began redirecting visitors to the official WikiLeaks.org site to Wikileaks.info — "was not discussed with us".

      Spamhaus' services for tracking dangerous domains are widely used globally, so the warning carries significant weight. And although Spamhaus said it "takes no political stand on the Wikileaks affair", its actions pose a further difficulty for those allied with Wikileaks' cause.

      Wikileaks editor Julian Assange was arrested last week in the UK for possible extradition to Sweden, where he faces allegations of sex crimes. Assange denies the alleged crimes. A British judge ruled he could go free on bail, but prosecutors are appealing that decision. The prosecutors' challenge is expected to be heard today, according to Reuters.

      More directly related to Wikileaks' mission is the possibility of prosecution in the US United States for violation of the Espionage Act.

      Spamhaus also warned that Wikileaks.info is relying on Heihachi.net, "a provider run 'by criminals for criminals'", for Domain Name Service (DNS) needs. DNS is a technology that converts the web addresses people type into the numeric internet addresses computers actually use to communicate.

      Here again, Wikileaks.info objected.

      "We do not know who else is hosted with Heihachi Ltd and it is none of our business. They provide reliable hosting to us. That's it", Wikileaks.info said on its website.

      Wikileaks is concerned about its reputation. "That's why we contacted Spamhaus to find out if they could remove us from the list", the Wikileaks.info representative told CNET. Spamhaus hasn't responded, according to the Wikileaks.info website.

      Wikileaks.info selected its services to avoid further problems with interrupted net service, the site said. "Wikileaks has been pulled from big hosters like Amazon.  That's why we are using a 'bulletproof' hoster that does not just kick a site when it gets a letter from government or a big company" ,the site said.

      Spamhaus is not alone in its concern. On Sunday, security company Trend Micro also warned of the Heihachi.net connection.

      "Heihachi Ltd is known as a bulletproof, blackhat-hosting provider in Russia that is a safe haven for criminals and fraudsters. It hosts a long list of criminally-related domains. Among these domains are banking fraud domains, carders' (criminals who trade stolen credit card information) websites, malware sites and phishing sites. No matter what your political view is, this is rather disturbing", Trend Micro senior threat researcher Feike Hacquebord said. "We assess the Wikileaks.info domain as highly risky and we do not recommend visiting this site as long as it is hosted by Heihachi."

Source from ZDNet

About Todayisp
Todaynic.com International Limited(Todayisp.com) was incorporated in Hong Kong in 2005, directly under Todaynic.com, Inc. which was established in 2000. As one of the first ICANN (The Internet Corporation for Assigned Names and Numbers), Verisign, HKDNR, and CNNIC (The China Internet Network Information Center) accredited registrars, Todaynic is also a leading provider of services in domain name registration and web hosting.

Register .info domain names here

www.todayisp.com

Todaynic.com International Limited

ICANN CNNIC HKDNR Accredited Registrar