I think Usenetnow/Blocknews is using their own frontend. The tracert ends at newsfarm-us.blocknews.net and we know that Usenetnow/Blocknews is a reseller, so that's not the final destination -- it stops short of the real IP address of the serverfarm. Retention can often give a clue to who the back-end provider really is. Back in summer 2008, Highwinds retention was only 100 days, and other backend providers like news-service.com, Astraweb, and Readnews were advertising retention of around 150 or 160 days. So UsenetNow was obviously not using Highwinds then, since they were claiming 50% more retention than Highwinds had. Today however, Readnews claims 200 days retention, Highwinds over twice that. Usenetnow/Blocknews claim retention that is close to Highwinds retenton. (the website possibly a month outdated) A better test would be to look at a NNTP usenet post and read the header ID, it contains the full routing trace (all the NNTP servers a post/article passes through from being posted to being read), and everything posted on Highwinds servers - regardless of reseller involved - has the same format unique to Highwinds (for instance, your username is encrypted in the routing string - and no other provider does this). I'm fairly sure that using a different front-end server would not change this "fingerprint" of a Highwinds-backend-server post.