Cloudflare ($NET) supports threats of violence against government officials and imminent lawless action

Looks like Njalla has gotten rid off them. If that's the case, Njalla pretty much never allows you to move the domain elsewhere, they just steal it.
1742377376893.png
 
Last edited:
  • Informative
Reactions: Pee Cola, The Mass Shooter Ron Soye, clipartfan92 and 1 other person
  • Feels
Reactions: Testacles Maximus
dumbledore said:
Looks like Njalla has gotten rid off them. If that's the case, Njalla pretty much never allows you to move the domain elsewhere, they just steal it.
View attachment 7110105
Click to expand...
It appears on the whois that it was updated today 03-19-2025 08:19:02, They'll be going to a different address but the clear VPS hosting by OVH and the edu info is still available for any concerned samaritans on the previous page. im surpised njalla dropped them, they're usually the type to support antifa and outright declined to host the farms when the site was having hosting issues.
 
The DNS is still propagating because the domain is so new. Some nameservers are cloudflare, some are still njalla (registrar). AFAICT, njalla hasn't booted them. Domain status is still "addPeriod" (new domain) and "serverTransferProhibited" (also happens for new domains)

Unless it's a mirror, it's possibly hosted here (picked up by internet scanners already):
(https://archive.is/wip/xdx6t)
The other result (mentioned on page 1) for an OVH server is just the backend for sportschan.org, which shows up because the html page contains the word "dogeque.st", because that text is present somewhere in a post/on the site. Doesn't appear to be a mirror.

The RDNS is "gayyy.student.rit.edu", from Rochester Institute of IT. So a student has has reverse proxied it from their Synology NAS. Dorm room?

Direct access to Dogequest: https://129.21.131.13/dogeque.st/ / https://gayyy.student.rit.edu/dogeque.st/ (https://archive.md/UdYPM)

Video on the same webserver showing students shooting foam dart guns on a sport field at RIT, with Tigers logo and some faces visible: http://129.21.131.13/static/PXL_20250318_135253923.mp4 (https://archive.is/MODqo)
Low quality encode of the video attached. The filename also tells us that it was filmed with a Google Pixel phone. If I was a student at RIT I wouldn't show my pixel phone for fear of retribution from Musk fanboys...



I'm sure others can do more digging. Doesn't mean its 100% hosted there, but also there are plenty of other strange government-related files on the same server. https://129.21.131.13/ (https://archive.md/HZQLw)

1742392830126.png

Also note the timestamp on the dogequest folder, 1:27am on the 18th.

Coincidence that a "gayyy" IT student from New York with a bunch of other government files is behind it? You be the judge.

Edit: 20 minutes later, the /static/ folder with the video is a 403 forbidden. Weird, huh?
 
Last edited:
  • Informative
Reactions: Nitro!, The Mass Shooter Ron Soye, Miller and 3 others
  • Like
Reactions: NoReturn
He's FAT! said:
with a bunch of other government files is behind it? You be the judge.
Click to expand...
why would the student host a bunch of government files on the server? why would a glowie put a bunch of different government department files onto the server and then host dogeque.st there? maybe he is unaware other people could access these things on his server?
 
  • Thunk-Provoking
Reactions: Pee Cola
The read me txt states " Due to recent events, this archive serves to hold some things that have been removed from the public eye by the new administration. Everything was gathered legally from publically accessible sites.

A lot of this information is thanks for the wonderful community at https://safeguarding-research.discourse.group/.

This site is under construction, there is more to come. "
The folder /web-archives/ states it's not a government site.
@He's FAT! Can't seem to reply so I'll ping you instead.
 
  • Thunk-Provoking
Reactions: He's FAT!
TulpaTownW said:
why would the student host a bunch of government files on the server? why would a glowie put a bunch of different government department files onto the server and then host dogeque.st there? maybe he is unaware other people could access these things on his server?
Click to expand...
A student activist hosting all the other stuff seems like a big coincidence to me, but I'm still doubtful mostly because the nginx server of dogeque.st shows the server version on 404 vs the gayyy.student.rit.edu one doesn't. You can still hit the cloudflare proxied one by adding cloudflares IP "104.21.40.205 dogeque.st" to your hosts file.

They should definitely know, because it has a valid cert from letsencrypt.

Lets hope its just a kid who mirrored it.
 
Softdrinks said:
The read me txt states " Due to recent events, this archive serves to hold some things that have been removed from the public eye by the new administration. Everything was gathered legally from publically accessible sites.
Click to expand...
No recent posts on that discourse from what I can see, but this makes me think its more likely a mirror. Wonder why they removed the video, perhaps they're seeing a bunch of traffic from others snooping around and are worried about their privacy. We shall see.
 
Seems to have 4 different JSON datasets in the html file:

1. Superchargers
2. Tesla stores, service centers, etc
^ probably derived from https://www.tesla.com/findus/list
3. People (with more detailed info/descriptions?)
4. People (less details)

Some data is definitely pulled from linkedin, like job titles.

They also start with some data like:
Code: 
"type":"FeatureCollection","generator":"overpass-turbo","copyright":"The data included in this document is from www.openstreetmap.org. The data is made available under ODbL.","
which suggests they somehow filtered all this data from openstreetmap? If addresses were leaked, maybe it was used to generate the pinpoints on the map for each one.
 
Last edited:
You must log in or register to reply here.
Back