My suspicion from digging into tracert and whois is that both the bogus sites are hosted by TeliaSonera in Sweden. Of course, it isn't all that difficult to mask that, and the TeliaNet routes may be exactly that, a mask. My route leaves the AT&T CONUS trunk and hits two different TeliaNet IPs before linking back to cloudflare-ic-309901-atl-bb1.c.telia.net at CloudFlare before resolving to the final 104.18 address.treadlightly wrote:The site appears to be hosted at Cloud Flare, Inc, at 101 Townsend Street in gun-free San Francisco.
Ah, drat - Cloud Flare is a bandwidth provider. They aren't hosting it...
They're almost certainly not in the U.S. or a territory, but they can be found. I'm normally not a conspiracy theorist type, but wouldn't it be fascinating if someone could, with good evidence, link this non-US illegal activity to a Soros or Bloomberg funded anti-gun initiative?