Voy Kitco forum update: Outage may be due to spammer compromise of its upstream ISP:
According to a new post on Nick's Collingwood Bulletin Board, VoyForums Support says that Spamhaus.org has published a blacklist block on their upstream network provider. Spamhaus compiles several widely used anti-spam lists that are used by internet service providers.
Now, voy.com resolves to 69.26.170.8 and voyager.com to 69.26.170.6. I found that Spamhaus lists 69.26.160.0, which resolves to Xeex Communications in Santa Monica, California. Aha! A smoking gun! But the whole IP range 69.26.170.0 - 69.26.170.255 is an IP address range owned by Xeex, and Xeex apparently owns 69.26.160.0 - 69.26.191.255 so Xeex is clearly Voy's ISP (it appears Voy were hosted by Xeex since May 26, 2011).
The Better Business Review lists a complaint (supposedly resolved) that Xeex Communications has been identified by multiple people to be providing internet service to malicious users, in various locations, that are sources of spam, viruses and hacking attempts.
Now if you look at Xeex's main website (I don't recommend it) it redirects to a different URL via a HTTP/302 redirect, which looks like a spam page and is known as "fake domains redirecting to pay-per-click scam sites".
A historical snapshot of the Xeex website looks like a normal ISP page, which states: "Xeex Communications is a global provider of optimized network solutions that offer the best possible performance, reliability and availability..." etc. etc. (the usual stuff). Clearly different from the spam page. So, obviously, Voy's ISP has been compromised, is still compromised, and until they sort it out and the request for removal of the block goes through, all traffic to Voy will be blocked. |
