[anti-abuse-wg] DDoS-Guard, a dodgy Russian firm that also hosts the official site for the terrorist group Hamas

In message <CAO3CAMr15ZzKzEqvObchLUZ9Q8F5Xqts+9WGJy=ZbnDA0qZZGQ at mail.gmail.com>, 
Siyuan Miao <siyuan at misaka.io> wrote:

>hamas.ps seems to be hosted on Sucuri ... a doggy US based firm?

I bitched about this to Sucuri.  They ignored me for a few days but then
kicked the site from their reverse proxy service and now it is now back
on a Russian network again:

# ORG: (RU) ORG-FG2-RIPE "OOO FREEnet Group"
#------------------------------------------------------------------------
193.233.15.207 hamas.ps

The entire 193.233.0.0/16 block is registered to this "FREEnet Group"
thing, whose contact info includes this:

address:        FREEnet NOC
address:        Institute of Organic Chemistry RAS
address:        47, Leninsky prospect
address:        119991 GSP-1, Moscow
address:        Russia

(I can only speculate that the Institute of Organic Chemistry is probably
as good a source as any for DIY homemade rocket fuel formulas.)

Meanwhile the 193.233.15.0/24 sub-block is being routed by AS42745
aka "Safe Value Limited"... allegedly of the Seychelles Islands. 

I'm a bit slow on the uptake, so if someone would be so kind as to
explain to me again why RIPE is in the habit of giving out AS numbers
to companies located in tax & corporate secrecy havens which are
themselves located the Indian Ocean, I'd appreciate it.

Well, anyway. this outfit does have a very impressive web site. :-)

http://safevalue.pro/


Regards,
rfg