Pirates move to… Antarctica?

Watch-movies.net, a big portalsite for illegal movies, has moved to Antarctica. At least according to the Whois records. Because in reality the site is hosted in the Netherlands by a provider called Cyberbunker.com. Cyberbunker is run by the famous Dutch hacker Sven Olaf ‘CB3ROB’ Kamphuis. CB3ROB uses fake Whois records to shield his clients.

Whois records contain information about the owner of a site, the provider, and the nameservers and DNS-servers associated with the site. The Whois registry enables people to find out who is running a site. By faking Whois records, it becomes much harder to establish who is running a certain site. Naturally, spammers, phishers, pirates and other cybercriminals prefer to use providers that are willing to hide their identities.

Faking Whois records is a violation of the rules set forth by ICANN, the organisation responsible for the operation of the Domain Name System (DNS). While providers like Cyberbunker claim that they protect the privacy of their users, the reality is that their services mainly attract cybercriminals.

Providers that don’t play by the rules are an increasing problem for the internet and a thorn in the side of the security community. Therefore, the security community applauded the recent move by ICANN to pull the accreditation of EstDomain, a provider that primarily catered to the needs of spammers and criminals.

http://futureofcopyright.com/index.php?page=news&id=154

Sven Olaf Kamphuis (CB3ROB), Cyberbunker, Germany

inetnum: 194.71.107.0 – 194.71.107.255
netname: DCP-ANYCAST
descr: DCP Networks Anycast
country: SE
admin-c: FN2233-RIPE
tech-c: FN2233-RIPE
status: ASSIGNED PI
remarks: —————————————————————
remarks: ABUSE related questions mail to abuse@dcpnetworks.net
remarks: Abuse related questions to any other address will be ignored.
remarks: —————————————————————
mnt-by: MNT-DCP
mnt-by: MNT-CB3ROB
mnt-routes: MNT-DCP
mnt-routes: MNT-CB3ROB
source: RIPE # Filtered
person: Fredrik Neij
address: DCPNetworks
address: Box 161
address: SE-11479 Stockholm
address: Sweden
mnt-by: MNT-DCP
e-mail: fredrik.neij@teneco.se
phone: +46 707 323819
nic-hdl: FN2233-RIPE
source: RIPE # Filtered
% Information related to ‘194.71.107.0/24AS13214′
route: 194.71.107.0/24
descr: Anycast DNS
origin: AS13214
mnt-by: MNT-DCP
source: RIPE # Filtered

role: CB3ROB Hostmaster
address: CB3ROB Ltd. & Co. KG
address: Koloniestrasse 34
address: D-13359
address: BERLIN
address: Germany