Hello Peter, They are indeed a "sleazy provider", as their contacts (all invalid) leads you to Italy, France, and other countries. Criminals have been using this source "vps1233-cloud.dns26.com" to send out malicious Zip file on behalf of Paypal. I will follow up with RIPE about this sleazy provider. Thank you, Reza Farzan ==== -----Original Message-----

From: peter h <peter@hk.ipsec.se> Sent: Jun 17, 2013 10:19 AM To: anti-abuse-wg@ripe.net Subject: Re: [anti-abuse-wg] vps1233-cloud.dns26.com ([92.39.242.8])

On Monday 17 June 2013 13.18, Reza Farzan wrote:

...

Hello,

Does anyone know whom this domain and IP (vps1233-cloud.dns26.com ([92.39.242.8]) belongs to?

Thanks for the report. Yes it looks like a sleazy provider. I have now added it to my blocklist

peter h