Asymmetric Warfare - it's not just for the other guys:
|  Home  |  Internet  |  OSINT |  Off-Topic |

 

17 October 2005
Tajdeed Network Neighbourhood Report

The following is a look at a small cluster of IP addresses at a datacenter in Hong Kong which are now, or have been, used by websites linked to

• the Al Massari clan (Mohammed and son Anmar) operating under the banner of the Tajdeed organization and the Party for Islamic Renewal (PIR) and best known as the Committee for the Defense of Legitimate Rights (CDLR)

• the Al Muhajiroun organization (currently calling themselves "the Saved Sect")

• the Islamic Observation Center (Marsad) of Yasser Al-Siri

• the "Eemaan of the Revivers" who produce the revivingislam.com site

• the MPACD (Muslim Programmers and Designers Community)

• the Tibyan Publications group, who specialize in providing translations of selected Islamic extremists texts to aid recruitment of English-speakers into the Global Jihad

• (former?) clients of the 357hosting.com operation which in turn was close to the Soldiers of Shareeah organization of Abu Hamza Al Masri

• and elements who operate in support of the Sunni terrorists currently seeking to undermine the now-democratic government of Iraq.

It is our contention that this occurance of all these sites representing all these various organizations on just a handful of IP addresses all directly adjacent to each other in a single datacenter (most likely on a single server) in Hong Kong is no accident. There is ample reason to believe that all these disparate groups and organizations are actually closely linked to each other, and that behind all these sites there are really only a handful of key players at work.

Consider, as just one small piece of supporting evidence, this page in support of a protest in front of the Saudi Embassy in London. At the bottom of the page we find four phone numbers. The first (archive)

and fourth (archive)

numbers are linked to Al Muhajiroun, while we know the second number to have been associated with Marsad/IOC, and all these numbers appeared under the heading of the PIR/Tajdeed (archive)

The Network Neighbourhood Report

revivingislam.com 202.64.47.26 none 11-Jul-05 19:37:47 revivingislam.com
revivingislam.com 202.64.47.26 none 31-Aug-05 19:38:41 revivingislam.com
thesavedsect.com 202.64.47.26 none 31-Aug-05 19:38:33 thesavedsect.com
thesavedsect.com 202.64.47.26 none 31-Aug-05 19:39:41 thesavedsect.com
dns2.host-arabia.net 202.64.47.27 none 15-Oct-05 15:46:53 dns2.host-arabia.net
dns2.host-arabia.net 202.64.47.27 none 15-Oct-05 15:55:29 dns2.host-arabia.net
www.thesavioursect.com 202.64.47.31 none 18-Jun-05 12:21:38 www.thesavioursect.com/forum/
host-arabia.net 202.64.47.31 none 21-Aug-05 11:53:07 host-arabia.net
host-arabia.net 202.64.47.31 none 21-Aug-05 12:14:43 host-arabia.net
host-arabia.net 202.64.47.31 none 05-Sep-05 22:41:25 host-arabia.net
dns1.host-arabia.net 202.64.47.31 none 15-Oct-05 15:46:37 dns1.host-arabia.net
host-arabia.net 202.64.47.31 none 15-Oct-05 15:55:43 host-arabia.net
host-arabia.net 202.64.47.31 none 15-Oct-05 15:57:24 host-arabia.net
server1.host-arabia.net 202.64.47.31 none 15-Oct-05 15:46:14 root@server1.host-arabia.net
ael-nl.org 202.64.47.32 none 29-May-05 3:31:47
boycottzionism.com 202.64.47.32 none 29-May-05 3:31:47
freearabvoice.org 202.64.47.32 none 29-May-05 3:31:48
marsad.net 202.64.47.32 none 29-May-05 16:20:16
www.marsad.net 202.64.47.32 none 29-May-05 18:37:21
www.tibyanpubs.com 202.64.47.32 none 29-May-05 3:31:45
www.tibyanpubs.com 202.64.47.32 none 29-May-05 3:31:46
www.tibyanpubs.com 202.64.47.32 none 29-May-05 3:31:46
marsad.net 202.64.47.32 none 03-Jun-05 7:47:55
www.freearabvoice.org 202.64.47.32 none 22-Jun-05 18:30:14 www.freearabvoice.org/
www.tibyanpubs.com 202.64.47.32 none 10-Jul-05 23:32:15 www.tibyanpubs.com/forums/
marsad.net 202.64.47.32 none 21-Aug-05 11:15:55 marsad.net
marsad.net 202.64.47.32 none 21-Aug-05 12:10:18 marsad@marsad.net
marsad.net 202.64.47.32 none 21-Aug-05 12:10:25 marsad@marsad.net
www.baghdadalrashid.com 202.64.47.32 none 08-Sep-05 13:53:40 www.baghdadalrashid.com/vb3/
marsad.net 202.64.47.32 none 26-Sep-05 7:59:14 marsad.net
tajdeed.org.uk 202.64.47.33 none 25-Sep-05 19:13:12 tajdeed.org.uk
www.tajdeed.org.uk 202.64.47.33 none 25-Sep-05 19:12:58 www.tajdeed.org.uk/forums/
www.tajdeed.org.uk 202.64.47.33 none 29-Sep-05 0:04:49 www.tajdeed.org.uk/
www.tajdeed.org.uk 202.64.47.33 none 09-Oct-05 11:17:44 http://www.tajdeed.org.uk/forums/fo...hp?s=&forumid=5
ftp.tajdeed.org.uk 202.64.47.33 none 15-Oct-05 15:54:52 ftp.tajdeed.org.uk
mail.tajdeed.org.uk 202.64.47.33 none 15-Oct-05 15:55:10 mail.tajdeed.org.uk
tajdeed.org.uk 202.64.47.33 none 15-Oct-05 15:45:34 tajdeed.org.uk/forums/
tajdeed.org.uk 202.64.47.33 none 15-Oct-05 15:58:52 tajdeed.org.uk
tajdeed.org.uk 202.64.47.33 none 15-Oct-05 15:59:08 tajdeed.org.uk

Review of sites discussed:

Name: revivingislam.com


Address: 202.64.47.26
Comment: Any site whose front page contains a "Random Islamic Quote" from Sayid Qutb can be safely assumed to be a site of the enemy. This site, upon our most recent visit to it, contained such a quote. The site is a co-production of the MPADC and the so-called "Eemaan of the Revivers". See also: Reviving Islam, One Dead Kafr at a Time

--

Name: thesavedsect.com


Address: 202.64.47.26
Comment: The current incarnation of Al Muhajiroun, notable UK Islamic extremist outfit.

--

Name: host-arabia.net


Address: 202.64.47.31
Comment: If this site doesn't look like much that's because it's nothing but a front for the CDLR/Tajdeed organization. Originally registered in the name of Anmar Al Massari, ownership of the host-arabia.net domain name was subsequently transferred to another individual, yet continues to exist primarily to host the Tajdeed sites.

--

Name: boycottzionism.com
Address: 202.64.47.32
Comment: Inactive. If memory serves, this was one of a number of projects of 357hosting.com of the Netherlands.

--

Name: marsad.net
Address: 202.64.47.32
Comment: Another currently inactive domain, the site's name is a reference to an observatory operated in Samarkand by Ulugh Beg, back in the Glory Days of Islam, which was a long, long, long time ago. The site was the home of the London-based Islamic Observation Center, which achieved a certain prominence as something of an Al Qaida mouthpiece. The site and organization (IOC) are linked to Yasser Al Siri, who has long been associated with the Al Massari clan (CDLR, aka Party of Islamic Renewal, or PIR).

--

Name: baghdadalrashid.com


Address: 202.64.47.32
Comment: Those who think that nominally Sunni Baathists and Islamic extremists of the Al Qaida variety can't make common cause need to think again. In addition to this site of the "Iraqi Resistance" consider also the involvement of elements of the CDLR/IOC/Marsad in standing up the website and Yahoo group of the Islamic Army in Iraq.

--

Name: freearabvoice.org


Address: 202.64.47.26
Comment: An anti-semitic website perhaps best known for an essay to the effect that killing Jews was "kosher". One of many (formerly) hosted by 357hosting.com.

--

Name: tajdeed.org.uk


Address: 202.64.47.33
Comment: Site of the PIR/Tajdeed, this site's best known feature is the forum, a known and popular haunt for the hardcore jihadists of this world. There are only a very few forums that could be described as central to the online life of the global jihad. This is one of them. See our recent Top Ten list for the names of some others.

The following two sites have sinced moved on, but we include them here for completeness sake.

Name: ael-nl.org


Address: 198.87.85.243
Comment: Another (former) 357hosting.com site, this one represents the Netherlands branch of the Arab European League.

--

Name: tibyanpubs.com
Address: 64.74.96.243
Comment: The website is inactive, but not the organization. See:

Tibyan Publications: Allah's Little Helpers
At-Tibyan Translations At Islamicawakening.Com
Irhabi007 & Co. Present: Al-Rashud, Saudi Al Qaida Ideologue Extraordinaire

The datacenter in Hong Kong is that of Pacific Internet (Hong Kong) Limited, Kowloon, HK

[Network incantations performed by Dal the Gael. Additional research by SoFIR]

Posted on 17 October 2005 @ 11:31