A network of over 60 active pedophile advocacy sites is hiding in plain "site", connected by a shared digital backbone. By mapping their DNS and hosting infrastructure, we can systematically dismantle them.

In 1977, police arrested Richard Peluso, a resident of Revere, Massachusetts, after discovering a sizable collection of Polaroid photographs of nude boys in Peluso’s apartment. Of the 63 boys pictures, 13 did testify, and thanks to their testimony twenty-four more men were indicted on over one hundred felonies, including “rape and abuse upon a child under 16, unnatural acts, open and gross lewdness, and indecent assault”. The DA in charge of the case, District Attorney Garrett Bryne, who had launched the investigation, is quoted saying “[they] were just the tip of the iceberg” and announced the beginning of a new hotline for Boston citizens to report any "suspected contact between gay men and youth under the age of sixteen". The hotline was a success in that many tips came in immediately, but quickly it was clear that this was not being set up to help the vulnerable youth, but to demonize the gay community.

Outraged, Members of Boston’s radical gay liberation journal Fag Rag gathered to form the Boston-Boise Committee (B/BC). The B/BC was extremely successful, after a large protest at city hall, the hotline was taken down. The B/BC went on to help educate the media on "responsible media reporting on alleged sex crimes involving gay men" and even helping to bridge the divide between the fractured Gay and Lesbian communities of the late 70's. The B/BC would harness this unity to connect and raise awareness among gay activists on the, then, controversial issue of age-of-consent laws. They helped create organizations like The International Lesbian and Gay Association (ILGA), which became one of the most prominent voices in the fight for equality.

Unfortunately, just 4 months after ILGA was formed in 1978, a few B/BC members organized a public forum on the topic of “Man/Boy Love and the Age-of-Consent”. The event was attended by about 150 people and spurred so much interest that Tom Reeves, along with David Thorstad and around thirty “boy-lovers”, riding off the coat tails of real progress, subsequently decided to form the North American Man/Boy Love Association (NAMBLA).

Almost all pedophile advocacy groups hide behind the guise of "Gay advocacy". These groups often claim that opposition to their desires stems from hidden homophobia or a misunderstanding of history. This is obviously false. NAMBLA took advantage of a real activism and well meaning organizations as a smoke screen for finding and exploiting vulnerable people. Like when NAMBLA sold on its website "The Survival Manual: The Man's Guide to Staying Alive in Man-Boy Sexual Relationships", which gave details about the avoidance of capture and prosecution; the American Civil Liberties Union (ACLU) stepped in to defend NAMBLA as a free speech matter. Using others good intentions for their own desires is par for the course.

In 1995, and with the guidance and legal counsel of NAMBLA, the "Boychat" forum started. The founder of BoyChat, who used the alias 'Kasper,' had initially set up the forum as part of a pedophile network called Free Spirits. Xavier von Erck created Perverted-Justice to lead the fight to get these sites taken down. Erck claims they were hosting at one point up to 85 pedophile websites. In 1998 members of the Free Spirits Coalition, including "Camper" AKA "John White" "PopaBear" AKA Stacey Katz and "Somersault" AKA Ian Hodgson created the Montreal Ganymede Collective which was an in person meeting of pedophiles at coffee houses and private residences. There have been lecturers such as Robin Sharpe, who in 2001 fought the supreme court of Canada over the legality of his child pornography, and visits by computer experts who help the pedophiles clean up their computers, encrypt child pornography and stay anonymous online. Thankfully, after public backlash lead by perverted-justice in 2007 the Freespirits network was kicked off their hosting and taken down. Unfortunately they were back up and running within a few weeks and are more active now than ever.

Boychat.org is where it started, a message board for pedophiles to post about their wants and opinions. From there it grew: Boywiki.org, their personal wiki; boylinks.org, a large link repository; jungsforum.net, German BoyChat; castilloazul.org, Spanish BoyChat; legarcon.net, French BoyChat; and Freespirits.info, the main donation collection website. Perhaps most insidious is lifeline.chat, which presents itself as a mental health resource for struggling pedophiles but actually operates as a front to push pro minor contact viewpoints and recruit more pedophiles into the ideology. All of these websites are live and active. Any attempts at reporting these sites fall on deaf ears. Before moving into the modern landscape, here are some terms commonly used within these communities:

MAP | Minor Attracted Person — the preferred self-label used by pedophiles to rebrand and normalize their attraction.
BL / GL | Boy Lover / Girl Lover — self-descriptors indicating the gender of children they are attracted to.
Pro-C / Anti-C | Pro-Contact / Anti-Contact — refers to whether someone advocates for sexual contact between adults and minors. Almost every organization and website discussed in this blog is Pro-C.
Anti| Shorthand for anyone who opposes pedophilia and its normalization.
AMSC | Adult-Minor Sexual Contact — a fabricated term intended to replace CSAM (Child Sexual Abuse Material), reframing abuse as "consensual contact."

In 2024, under a wave of Pro-c pedophiles feeling emboldened on the internet, an umbrella organization MAP Union (Mu) was born. Under the direction of a MAP obsessed and current 6th grade teacher, Brian Ribbon along with Percy Shelley, Jim Burton and Tommaso Battista calling themselves the "enclave circle". Mu and "the circle" meet yearly in person to talk about what's next for pedophile advocacy. Brian Ribbon is a very polarizing and loud figure in the community; posting articles like "Let's get more MAP's in the classroom!" and "Interview with a darknet child porn site admin". I could go on about Brian Ribbon for days, but that's for another article.

Although Mu presents itself as a completely separate network, a closer look reveals otherwise.

The Mu / aldns.org Cluster

That's a big ecosystem in itself, hosting everything from social media to a video hosting platform. Brian and his friends have helped shape the way the pedophile community refers to themselves as well as how they operate. But there's more, and for those of you not technologically inclined I'll add a TLDR at the end of this explanation.

Digging into the DNS records of these sites (NS records, which tell you who controls a website's address, and MX records, which tell you where their email goes) I found they are ALL connected on their back end, obfuscating this by using multiple hosts and servers spread around the world.

That's NAMBLA, Freespirits, and Mu working together. 64 domains across 11 countries and 5 languages. All connected by either their hosting server or a a privately run Romanian mail server. They're organized and they're tech savvy.

TLDR: for non-technical readers: Think of a strip mall, all the stores look different with different employees and rules but if they share the same manager and phone number, that would be an obvious sign that it's all one entity.

During this investigation I saw a lot of things I'd rather not see, and I'll end up doing a full length article about all of this, but for now I wanted some help to bring all of this to light. I have reported almost all of these sites to multiple different government agencies and heard back crickets. Here's how you can help.

What You Can Do Right Now

You don't need to be a cybersecurity researcher to make a difference. This network has survived for 30 years partly because reporting is fragmented. One person files one report about one domain, it gets triaged as an isolated site, and nothing happens. The infrastructure research above proves these aren't isolated sites. They're one network.

Below is every abuse contact that has jurisdiction over part of this network, and exactly which domains fall under each one. Pick the one that's most relevant to you and file a single, clear report. If even a fraction of the people reading this each file one report to one provider, that's more pressure than this network has seen in years.

Priority Reports

These three reports target the infrastructure that holds the entire network together. Taking down any one of them disrupts dozens of sites at once.

1. FranTech/BuyVM — The Web Host This single company hosts the majority of the network. In 2006, a public pressure campaign got Verizon to drop freespirits backbone connection and the organization went out of business within a year. Infrastructure pressure works.

2. Hosterion SRL — The Shared Email Server One server in Romania handles email for both Free Spirits and Mu. Losing this server breaks internal communication across the entire network.

3. Cloudflare — DNS Protection for the Email Backbone Cloudflare provides DNS protection for isp-email.net, the domain that routes to the shared email server. Cloudflare has an abuse form and a track record of acting when public attention is applied.

Hosting Providers

Domain Registrars

Law Enforcement & Clearinghouses

How To Write an Effective Report

You don't need to write an essay. A good report has three things:

1. What you're reporting — Name the specific domain(s) and what they host. Example: "brianribbon.com is a blog by a self-identified pedophile who is currently working as a teacher. On March 22, 2026, he published an article advising other pedophiles how to obtain teaching jobs."

2. Why it matters — One sentence connecting it to the bigger picture. Example: "This site is part of a network of 60+ interconnected pedophile advocacy domains sharing infrastructure, documented at https://www.gpatricksec.com/pedos-in-plain-site"

3. What you're asking for — Be specific. "Please review this domain under your acceptable use policy" for hosting providers. "Please investigate" for law enforcement.

That's it. One clear report to one provider is worth more than a vague mass email to ten.

Share This Investigation

The 2006 Perverted Justice campaign proved that public attention is the single most effective tool against this network. Verizon dropped Epifora within weeks, no lawsuit, no court order, just public pressure. If this article reaches the right people, the same thing can happen again.

• Share the article
• Tag the hosting providers

This network has operated in the open for 30 years. The infrastructure is mapped. The connections are proven. The abuse contacts are listed above. The only missing piece is enough people caring enough to use them.

Feel free to contact me anytime at [email protected] for any questions or comments.

Investigation by gpatricksec. All research conducted using passive OSINT methods. No unauthorized access. All findings sourced to publicly available records, published journalism, and passive DNS data.