Request Spamhaus contact

Mon Jan 17 23:46:24 UTC 2011

Hi!

>> That's fine, but the listings don't even make sense. There is no
>> evidence in the listing and i'm still trying to figure out a) why they
>> think that these new listings have anything to do with the ones we
>> already cleaned and b) which customers actually need to be removed and
>> for specifically what reasons. Their entire mentality is "the site is
>> pharmacy which means its part of a criminal spammer gang," regardless
>> of whether or not that is true.

> Please stop pretending that you're not hosting e-trash.  208.64.122.114
> is still hosting an active SEO poisoning site (myspace-codes.com).  I
> think, frankly, it would make your life a lot simpler if you just
> accepted the fact that BlackLotus sells to e-trash, just like the rest
> of the "ddos-protected hosting solutions" companies do.

viagra-shopping .com
potenzmittel-at .com
medicin-24 .com
apothekeohnerezept .at

[root at noc log]# whois 208.64.122.234
[Querying whois.arin.net]
[Redirected to rwhois.blacklotus.net:4321]
[Querying rwhois.blacklotus.net]
[rwhois.blacklotus.net]
%rwhois V-1.0,V-1.5:00090h:00 support.blacklotus.net (Ubersmith RWhois 
Server V-1.8.0)
autharea=208.64.120.0/21
xautharea=208.64.120.0/21
network:Class-Name:network
network:Auth-Area:208.64.120.0/21
network:ID:NET-481.208.64.122.232/30
network:Network-Name:Nameserver IP Addresses
network:IP-Network:208.64.122.232/30
network:IP-Network-Block:208.64.122.232 - 208.64.122.235
network:Org-Name:Aloli LTD
network:Street-Address:3321 Road Town, Drake Chambers
network:City:Tortola
network:State:-
network:Postal-Code:3321
network:Country-Code:
network:Tech-Contact:MAINT-481.208.64.122.232/30
network:Created:20101015124139000
network:Updated:20101015124139000
network:Updated-By:support at blacklotus.net
network:POC-Name:Network Operations Center
network:POC-Email:support at blacklotus.net
network:POC-Phone:(323) 657-5944
network:Tech-Name:Network Operations Center
network:Tech-Email:support at blacklotus.net
network:Tech-Phone:(323) 657-5944

This thread doesnt belong here. But hey, seems they are asking for it.
Oh and yes all these botnet landing pages are still up...

If i look back at November 2010 archives there is a whole bunch and its 
adding new domains daily.

brandviagra23 .com
brandviagra27 .com
brandcialis26 .com
brandviagra25 .com
...

Neh, clean as it can be cough ...

Bye,
Raymond.