From what I can tell, there's been a bit of discussion already about the bizarre websites that share hosting with the website for Comet Ping Pong--you can read a bit more about them here and here--but there are two things in particular that caught my attention about the Dr. Pong site that I haven't seen brought up, but admittedly my own understanding of coding/design may be leading me astray here with my conclusions, so forgive and correct me if the foundation of this collapses at any point.
First of all, each section of the website is in it's own PHP file, which is weird considering PHP is used to make sites websites more dynamic and responsive, with many moving parts that can be called upon separately. Whereas a traditional web element is (more or less) read line by line and presented in that order, and this may be oversimplifying, PHP calls for data from other locations and responds to that data accordingly, giving it "intelligence" and "memory" so to speak, almost like it's software.
So what's the big deal? Well, the Dr. Pong website isn't dynamic at all. In fact, it doesn't really do anything outside of linking to other places.
In particular, under the Bilder (Images) section, none of the links on that page do anything at all other than change the url to a different PHP file, also notice how Galerie 1 starts off with "005" and ends with Galerie 4 "008"
Gallery 1: http://www.drpong.net/bilder.php?gallery=005_Galerie_1
Gallery 2: http://www.drpong.net/bilder.php?gallery=006_Galerie_2
Gallery 3: http://www.drpong.net/bilder.php?gallery=007_Galerie_3
Gallery 4: http://www.drpong.net/bilder.php?gallery=008_Galerie_4
When you click on the pictures, essentially the same thing happens. There's no pop up, and the website doesn't respond at all outside of changing the URL. This time, however, they all change to the same place, Galerie 5 (009) and have a "zoom number" amended to them. Each picture has a unique zoom number.
Clicking the guy in headphones in Gallery 1 gives you http://www.drpong.net/bilder.php?gallery=009_Galerie_5&zoom=2
Clicking the guy in headphones in Gallery 2 gives you http://www.drpong.net/bilder.php?gallery=009_Galerie_5&zoom=2
Clicking the woman making kissy lips in Gallery 3 gives you http://www.drpong.net/bilder.php?gallery=009_Galerie_5&zoom=7
Clicking the woman making kissy lips in Gallery 4 gives you http://www.drpong.net/bilder.php?gallery=009_Galerie_5&zoom=7
At first I thought there was just an error in the code, and it very well might be just that, but the more I looked at it, the more I got the feeling it was designed like that intentionally.
People have already pointed out that some of the videos on the other sites may use steganography or similar methods to encode things into videos. There are also weird discrepancies with the background images.
There is also this strange page which is not a php file, but instead a subfolder, and doesn't appear to be linked to anywhere on the site.
My guess would be that the "Bilder" page--or less likely the entire site--works as a login screen and a particular order of clicks is the code to get past it. Once past that, you're directed to a landing page (admin) where you're prompted for a second, traditionally typed password. I would imagine there are gigs and gigs of child pornography inside, and probably a fairly large community. Operating out of Germany is probably their safest course at the moment.
It makes sense that Alefantis would dip his toes in to pornography, the market for it is significantly bigger than prostitution clients.
view the rest of the comments →
Prepper_Jack ago
What is catching my eye is the image frames in particular.
amCassandraAMA ago
explain explain
peteczar ago
the dots on them. some frames are rotated?
Prepper_Jack ago
Yeah, could be a clue to the order.
peteczar ago
always for portrait orientation pics though so... actually i dont know. odd..keep digging. lol
Prepper_Jack ago
Eh, I've seen some odd dot codes before.
Steganalysis coming up empty on the images.
amCassandraAMA ago
https://i.imgur.com/Cy2FO0K.png for ease of view
Prepper_Jack ago
Thanks. Also corresponds to numbers of 3, 13, 16, 18, 22, and 24. Doesn't mean anything to me at the moment, but will take a closer look. Peteczar may be right in that it's just for portraits.
But it's a weird page. Either the programmer behind it isn't very good, or is pretending to not be very good. Would run some analysis on the server, but with the heat this case has on it, and all the eyes around, I'm sure even that might find me with Feds at the door.
amCassandraAMA ago
depends on where you live
Prepper_Jack ago
I'll have to let others do it, if they are so inclined. I seem to have attracted some attention, perhaps from certain comments on prominent sites. Two weeks ago I was getting doorbell rings at 11P-1A. Could be neighborhood kids, but I doubt it - pretty sure I've made the naughty list.
amCassandraAMA ago
dont get dissappeared