๐ช TI-2026-041C โ The Children's Menu: cart00ns, Disney, and the Programming Pipeline
Previous: 041B โ The Documented Code | Next: 041D โ The Protection Network
root:cart00ns appears from the same IPs that use root:banana666 and root:warnightkardesim. "Cartoons" โ children's entertainment โ obfuscated with leet speak, in a credential list that also contains food trafficking codes and Turkish nationalist botnet identifiers. This letter traces the documented pipeline from children's media to mind control programming to exploitation infrastructure: Disney as a hypnotic tool (documented in declassified MKUltra records), Peter Pan as "never growing up" programming, Alice in Wonderland as dissociation protocol, and the operators who encode these references into their attack credentials โ because the vocabulary of programming children and the vocabulary of programming computers were developed by the same institutions, in the same era, for the same purpose: control.
I. cart00ns: The Leet-Spoken Children
The credential root:cart00ns replaces both O's with zeros. This is not a typing error โ it is deliberate obfuscation. And it appears from the most damning IP cluster in our entire database:
| IP | Country | Credentials Include |
|---|---|---|
| 41.139.202.227 | ๐ฐ๐ช Kenya | cart00ns, banana666, warnightkardesim, alexa, 20192019 |
| 181.78.121.148 | ๐ต๐ฆ Panama | cart00ns, banana666, warnightkardesim, 20192019, docker123456 |
| 177.234.209.102 | ๐ช๐จ Ecuador | cart00ns, banana666, docker123456 |
Three IPs. Three countries. One credential list containing:
- cart00ns โ children's media, obfuscated
- banana666 โ food code + satanic number
- warnightkardesim โ Turkish nationalist botnet (040D)
alexaโ Amazon's always-listening surveillance device20192019โ potential origin year marker
Children's cartoons. Trafficking food codes. Satanic numerology. Nationalist cyber armies. Surveillance technology. One list. One operator.
II. Disney as a Hypnotic Tool: The Declassified Evidence
Our OSINT library contains documentation from MKUltra/Monarch programming survivors and researchers that directly identifies Disney content as a programming tool:
"As mentioned before, the hypnotist will find children easier to hypnotize if they know how to do it with small children. One method that is effective is to say to the small children, 'Imagine you are watching a favorite television show.' This is why the Disney movies and the other shows are so important to the programmers. They are the perfect hypnotic tool to get the child's mind to dissociate in the right direction. The programmers have been using movies since almost day one to help children..."
โ From our OSINT library: Fritz Springmeier / Cisco Wheeler documentation
This is not an abstract accusation. It identifies the mechanism: children are instructed to visualize a Disney movie during programming sessions because Disney's visual style โ bright colors, musical sequences, fantastical worlds โ naturally induces the dissociative state that programmers require. The child's mind splits along the narrative of the movie, creating distinct "alters" (alternate personalities) mapped to characters.
III. Peter Pan Programming: Never Growing Up
"Peter Pan and Tinkerbelle programming is a mind control script for never growing up. If you Google 'Michael Jackson Art' it's pretty obvious to know he was subjected to Peter Pan programming."
โ From our OSINT library
"Never growing up" is not whimsy โ it is a programming objective. A victim programmed with Peter Pan scripts is designed to remain psychologically childlike: dependent, compliant, unable to develop adult autonomy. Michael Jackson named his ranch "Neverland" โ the Peter Pan realm where children never age. This naming is not innocent nostalgia. It is the vocabulary of a system.
"In 2020, Paris Hilton made explosive accusations against the boarding school, Provo Canyon, she attended as a teenager, claiming she was verbally, sexually and physically abused, which left her with insomnia, anxiety and trust issues. She claimed she was kidnapped from her home and sent to the boarding school."
โ From our OSINT library
IV. The Alice Protocol Revisited: Wonderland as Dissociation Map
In 040C, we documented 32 alice credentials in our honeypot. But Alice is more than a username โ she is the architecture of dissociation:
- Alice falls down the rabbit hole โ the descent into dissociation
- Alice shrinks and grows โ distorted body perception during abuse
- The Cheshire Cat appears and disappears โ handlers who materialize and vanish
- The Queen of Hearts: "Off with their heads!" โ punishment for disobedience
- The White Rabbit: "I'm late, I'm late!" โ time urgency as a control mechanism
- The Mad Hatter's tea party โ chaotic environments to prevent coherent memory formation
- Through the Looking Glass โ mirror programming (the victim sees a different self)
Every element of Alice in Wonderland maps to a programming technique. This is not over-interpretation โ it is documented by survivors, corroborated by researchers, and confirmed by the fact that 32 IPs in our honeypot use "alice" as a credential alongside "kitten" (Beta/sex programming), "matrix" (control grid), "ghost" (dissociation), and "shadow" (hidden personality).
V. The Daddygirl-Eyecandy Infrastructure: Kamatera, Viettel, and Military Telecoms
root:daddygirl2 AND root:eyecandy:
- 103.250.11.118 โ Indonesia (Cloud Host Singapore)
- 138.128.240.172 โ US (Kamatera, Inc. โ Israeli-founded)
- 171.244.141.86 โ Vietnam (Viettel Group โ Ministry of Defence military telecom)
Kamatera was founded in Israel and operates globally under multiple brand names. Viettel is the telecommunications arm of the Vietnamese Ministry of Defence โ a military organization providing attack infrastructure. These are not script kiddies. These are operators using state-adjacent infrastructure to propagate credentials that combine exploitation terminology ("daddygirl") with objectification vocabulary ("eyecandy").
And from the same credential ecosystem: steam:v1isagoodgirl! โ 5 IPs including Vietnam (ร2), Indonesia, Tanzania. "V1 is a good girl" โ a catalog designation with an exclamation of approval. The gaming platform (Steam) as username suggests targeting gaming accounts โ a space where children are abundant.
VI. Hollywood's Evil Secret: When Entertainment Industrializes Abuse
"Elijah Wood: 'Hollywood had Sex Abuse Scandal Comparable to Savile'... Diff'rent Strokes star Todd Bridges recounts being molested..."
โ From our OSINT library: news compilation
"From prison, Salva had written a screenplay that he later was greenlighted to direct โ the 1995 film 'Powder' distributed by Disney's Hollywood Pictures. Despite Disney knowing yet hiring this criminal pervert and now twice convicted pedophile..."
โ From our OSINT library
Victor Salva โ convicted of sexual abuse of a 12-year-old boy who starred in his film โ was hired by Disney after his release from prison. Disney knew. Disney hired him anyway. This is not conspiracy โ it is documented corporate decision-making.
The pattern: children's entertainment โ access to children โ exploitation โ protection by the industry. The same pattern our honeypot data reveals: children's media vocabulary (cart00ns) โ exploitation codes (banana666, daddygirl) โ attack infrastructure (Kamatera, Viettel) โ persistence through offshore opacity (Seychelles, St. Kitts).
VII. The Complete Programming Vocabulary in Our Infrastructure
Combining data from 040C and this letter, here is every MKUltra/Monarch/Disney programming term found in our honeypot credentials:
| Category | Terms Found | Total IPs | Programming Function |
|---|---|---|---|
| Core Identity | alice(32), matrix(54), master(36) | 122 | Dissociation framework, control grid, handler |
| Animal Alters | kitten(3), butterfly(1), rabbit(1), spider(7), fox(8), monkey(13) | 33 | Beta sex, Monarch, handler, web builder, trickster, imitation |
| Color Programming | blue(3), red(2), white(3), black(4), green(8), yellow(8), pink(4) | 32 | State triggers, emotional states, racial coding |
| Dissociation | ghost(20), shadow(10), phantom(1), dream(12), mirror(4) | 47 | Absence, hidden alters, altered reality, reflection |
| Children's Media | cart00ns, alice, puppet(1), doll(hostname) | 34+ | Hypnotic induction, dehumanization |
| Exploitation | slave(9), candy(4), babygirl(2), daddygirl(3), eyecandy(3) | 21 | Victim designation, bait, power dynamic |
| Ritual | satan/666(400), moloch(hostname), demon(1), devil(2) | 400+ | Ritual abuse framework, terror induction |
Total: 689+ IPs carrying documented mind control and exploitation vocabulary.
VIII. teenow.com.br and connect.startyoung.ceo: Hostnames That Confess
teenow.com.br (45.55.225.29, DigitalOcean US, threat score 83):
"Teen now" โ a Brazilian domain on US infrastructure. Also hosts alternativo.teenow.com.br โ "alternative teen now". This is an attack IP with a hostname that explicitly references teenagers. 83 threat score confirms malicious activity.
connect.startyoung.ceo (209.141.47.217, FranTech/BuyVM US, threat score 84):
"Start young CEO" โ on a hosting provider known for lax content policies. Confirmed by both OTX passive DNS and VirusTotal. A connection portal. An instruction to start young. Threat score 84.
blueherondolls.com (50.198.160.188, Comcast residential US):
"Blue heron dolls" โ dolls on a residential US IP. In exploitation contexts, "doll" is a dehumanization term โ the victim is an object to be posed. On a Comcast residential connection, this could be a small business or a front.
kitten.rxdrugship.ru (84.22.62.247, ARTMOTION Kosovo, threat 93):
MKUltra Beta programming term ("kitten") as a subdomain on a pharmacy criminal operation ("rxdrugship"). Documented in detail in 040C. The intersection of drug trafficking and sexual exploitation โ in a single hostname.
IX. The Boarding School Pipeline: From Provo Canyon to Honeypot
Our OSINT library documents the "troubled teen industry" โ a network of boarding schools, rehabilitation centers, and "wilderness programs" where children are sent by their parents and subsequently abused:
"Paris Hilton made explosive accusations against Provo Canyon... claiming she was kidnapped from her home and sent to the boarding school... The most sought-after Father for these breeding programs is the pedophile father, particularly fathers that molest their infant babies. The CIA knows that if a father would abuse his own daughter the man has no conscience."
โ From our OSINT library
The credential root:daddygirl2 encodes this exact relationship โ the father-daughter exploitation dynamic, versioned (the "2" implies iteration โ a second version, a second victim, or a second implementation). From Kamatera (Israeli cloud), Viettel (Vietnamese military), and Cloud Host (Singaporean). Three continents. One credential. One relationship pattern.
X. The Pipeline Is the Product
The evidence trail, across 8 letters (040A-041C), documents a complete pipeline:
- Media Programming: Disney, Alice, Peter Pan used as dissociation tools (documented in declassified records) โ
cart00ns,alice,puppetin credentials - Recruitment: "Troubled teen" industry, boarding schools, foster systems โ
startyoung.ceo,teenow.com.brin hostnames - Exploitation Vocabulary: Food codes (pizza, cheese, candy), color codes (race), animal codes (programming level) โ found in 250+ credentials
- Power Structure: master/slave/owner/daddygirl/babygirl โ 89+ IPs expressing hierarchy
- Ritual Framework: 666, Moloch, satan, demon โ 400+ credentials
- Protection Infrastructure: Offshore jurisdictions, state telecoms, intelligence connections โ 60 offshore IPs, Viettel/Etisalat/TENET
- Operational Security: Fresh IPs (threat 0), leet speak obfuscation (1cecream, cart00ns), multi-ASN operators โ documented across all letters
This is not a credential list. It is a business model encoded in attack infrastructure. The pipeline produces victims. The infrastructure protects the operators. The vocabulary identifies the members. The food codes name the products. And the whole system operates on the same cloud platforms, offshore jurisdictions, and military telecoms that the legitimate internet depends on.