<div dir="ltr"><div> </div><img src="cid:ii_kk1r3ovu0" alt="image.png" width="517" height="496"><div> </div><div> <div><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div style="font-size:12.8px">Rui A. S. Esteves</div></div></div></div></div></div> </div></div> <div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Sun, Jan 17, 2021 at 2:17 PM Michele Neylon - Blacknight via anti-abuse-wg <<a href="mailto:anti-abuse-wg@ripe.net">anti-abuse-wg@ripe.net</a>> wrote: </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"> <div lang="EN-IE" style="overflow-wrap: break-word;"> <div class="gmail-m_-7561998516924577556WordSection1"> Looks like Parler is now using them as well: <a href="http://parler.com" target="_blank">parler.com</a> has address 190.115.31.151 <div> -- Mr Michele Neylon Blacknight Solutions Hosting, Colocation & Domains <a href="https://www.blacknight.com/" target="_blank">https://www.blacknight.com/</a> <a href="https://blacknight.blog/" target="_blank">https://blacknight.blog/</a> Intl. +353 (0) 59 9183072 Direct Dial: +353 (0)59 9183090 Personal blog: <a href="https://michele.blog/" target="_blank">https://michele.blog/</a> Some thoughts: <a href="https://ceo.hosting/" target="_blank">https://ceo.hosting/</a> ------------------------------- Blacknight Internet Solutions Ltd, Unit 12A,Barrowside Business Park,Sleaty Road,Graiguecullen,Carlow,R93 X265,Ireland Company No.: 370845 </div> <div style="border-right:none;border-bottom:none;border-left:none;border-top:1pt solid rgb(181,196,223);padding:3pt 0cm 0cm"> From: anti-abuse-wg <<a href="mailto:anti-abuse-wg-bounces@ripe.net" target="_blank">anti-abuse-wg-bounces@ripe.net</a>> on behalf of Ronald F. Guilmette <<a href="mailto:rfg@tristatelogic.com" target="_blank">rfg@tristatelogic.com</a>> Date: Wednesday, 13 January 2021 at 02:59 To: Siyuan Miao <<a href="mailto:siyuan@misaka.io" target="_blank">siyuan@misaka.io</a>> Cc: <a href="mailto:anti-abuse-wg@ripe.net" target="_blank">anti-abuse-wg@ripe.net</a> <<a href="mailto:anti-abuse-wg@ripe.net" target="_blank">anti-abuse-wg@ripe.net</a>> Subject: Re: [anti-abuse-wg] DDoS-Guard, a dodgy Russian firm that also hosts the official site for the terrorist group Hamas </div> <div> In message <CAO3CAMr15ZzKzEqvObchLUZ9Q8F5Xqts+9WGJy=<a href="mailto:ZbnDA0qZZGQ@mail.gmail.com" target="_blank">ZbnDA0qZZGQ@mail.gmail.com</a>>, you wrote: ><a href="http://hamas.ps" target="_blank">hamas.ps</a> seems to be hosted on Sucuri ... a doggy US based firm? According to data provided by Farsight Security, Inc. the site was formerly located at 190.115.18.139, which is indeed DDos-Guard, up until 2020-11-12, and it was then moved to its current location, 192.124.249.13, which is indeed, Securi. ---------------------------------------------------------- ;; bailiwick: <a href="http://hamas.ps" target="_blank">hamas.ps</a>. ;; count: 70144 ;; first seen: 2019-05-14 23:18:11 -0000 ;; last seen: 2020-11-12 13:40:58 -0000 <a href="http://hamas.ps" target="_blank">hamas.ps</a>. IN A 190.115.18.139 ;; bailiwick: <a href="http://hamas.ps" target="_blank">hamas.ps</a>. ;; count: 11017 ;; first seen: 2020-11-12 13:45:02 -0000 ;; last seen: 2021-01-12 14:21:11 -0000 <a href="http://hamas.ps" target="_blank">hamas.ps</a>. IN A 192.124.249.13 </div> </div> </div> </blockquote></div>