jump to navigation

Canadian Pharmacy Scam – thepharmacydiscount.com – internetserviceteam.com June 27, 2009

Posted by Scrub in Alerts, Business Alert, Canadian Pharmacy Alert, Consumer Alert, Consumer Awareness, Counterfeit Drugs Alert, Counterfeit Medicines Alert, Fraud Alert, Malware, Patients and Patents, Pharmacy Alert - PharmAlert, Phishing & Identity Theft, Scam Alert, Security Alert, Spyware, Trojan.
Tags: , , , , , ,
trackback

Buying Precription Drugs Online May Be Dangerous
- Consumer Alert -
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

thepharmacydiscount

Address lookup

canonical name thepharmacydiscount.com.
aliases
addresses 95.168.177.116 - internetserviceteam.com

Internetserviceteam is a known content scraper bot operator, they are known to crawl the web to steal images (photos), they also run spam harvesting bots (scanning for email addresses) and scrape web page content to produce spam pages.

Domain Whois record

Queried whois.internic.net with “dom thepharmacydiscount.com“…

   Domain Name: THEPHARMACYDISCOUNT.COM
   Registrar: TODAYNIC.COM, INC.
   Whois Server: whois.todaynic.com
   Referral URL: http://www.NOW.CN
   Name Server: NS1.EVERYDNS.NET
   Name Server: NS2.EVERYDNS.NET
   Name Server: NS3.EVERYDNS.NET
   Name Server: NS4.EVERYDNS.NET
   Status: clientTransferProhibited
   Updated Date: 20-may-2009
   Creation Date: 02-dec-2008
   Expiration Date: 02-dec-2009

>>> Last update of whois database: Sat, 27 Jun 2009 22:59:29 UTC <<<

Queried whois.todaynic.com with “thepharmacydiscount.com“…

Network Whois record

Queried whois.ripe.net with “-B 95.168.177.116“…

% Information related to '95.168.177.0 - 95.168.177.255'

inetnum:        95.168.177.0 - 95.168.177.255
netname:        V3SERVERS-NET-967806
descr:          v3servers.net VPS&VDS customer server
country:        BY
admin-c:        SA4597-RIPE
tech-c:         SR614-RIPE
status:         ASSIGNED PA
mnt-by:         NETDIRECT-MNT
mnt-lower:      NETDIRECT-MNT
mnt-routes:     NETDIRECT-MNT
changed:        technik@netdirekt.de 20090417
source:         RIPE

person:         Sogreev Anton
address:        12 Knez Mihailova
address:        apt. 18
address:        Belgrade
address:        11000
address:        Serbia
phone:          +1 619 684 2664
e-mail:         mail@v3servers.net
abuse-mailbox:  abuse@v3servers.net
nic-hdl:        SA4597-RIPE
mnt-by:         NETDIRECT-MNT
changed:        technik@netdirekt.de 20081010
source:         RIPE

person:       Simon Roehl
address:      netdirekt e. K.
address:      Kleyer Strasse 79 /Tor 14
address:      60326 Frankfurt
address:      DE
phone:        +49 69 90556880
fax-no:       +49 69 905568822
e-mail:       technik@netdirekt.de
nic-hdl:      SR614-RIPE
mnt-by:       NETDIRECT-MNT
changed:      technik@netdirekt.de 20040224
source:       RIPE

% Information related to '95.168.160.0/19AS28753'

route:	        95.168.160.0/19
descr:	        ORG-nA8-RIPE
origin:	        AS28753
org:	        ORG-nA8-RIPE
mnt-lower:	NETDIRECT-MNT
mnt-routes:	NETDIRECT-MNT
mnt-by:	        NETDIRECT-MNT
changed:	technik@netdirekt.de	20090126
source:	        RIPE

organisation:   ORG-nA8-RIPE
org-name:       netdirect
org-type:       LIR
address:        netdirekt e. K.
                Kleyer Strasse 79 / Tor 14
                60326 Frankfurt
                Germany
phone:          +49 69 90556880
fax-no:         +49 69 905568822
e-mail:         ripe@netdirekt.de
admin-c:        SR614-RIPE
admin-c:        WW200-RIPE
mnt-ref:        NETDIRECT-MNT
mnt-ref:        RIPE-NCC-HM-MNT
mnt-by:         RIPE-NCC-HM-MNT
changed:        hostmaster@ripe.net 20040415
changed:        bitbucket@ripe.net 20050329
changed:        bitbucket@ripe.net 20060223
changed:        bitbucket@ripe.net 20060223
changed:        bitbucket@ripe.net 20060815
changed:        bitbucket@ripe.net 20070108
changed:        bitbucket@ripe.net 20070509
changed:        bitbucket@ripe.net 20070813
changed:        bitbucket@ripe.net 20080516
changed:        bitbucket@ripe.net 20080527
changed:        bitbucket@ripe.net 20081014
changed:        bitbucket@ripe.net 20090102
changed:        bitbucket@ripe.net 20090227
source:         RIPE

DNS records

name class type data time to live
thepharmacydiscount.com IN SOA
server: ns1.everydns.net
email: hostmaster.thepharmacydiscount.com
serial: 1246143007
refresh: 3600
retry: 900
expire: 1209600
minimum ttl: 3600
360s (00:06:00)
thepharmacydiscount.com IN NS ns1.everydns.net 86400s (1.00:00:00)
thepharmacydiscount.com IN NS ns2.everydns.net 86400s (1.00:00:00)
thepharmacydiscount.com IN NS ns3.everydns.net 86400s (1.00:00:00)
thepharmacydiscount.com IN NS ns4.everydns.net 86400s (1.00:00:00)
thepharmacydiscount.com IN A 95.168.177.116 3600s (01:00:00)
116.177.168.95.in-addr.arpa IN SOA
server: ns9.dnspro.de
email: ns.netdirekt.de
serial: 9042600
refresh: 10800
retry: 3600
expire: 1209700
minimum ttl: 100000
100000s (1.03:46:40)
116.177.168.95.in-addr.arpa IN NS ns9.dnspro.de 100000s (1.03:46:40)
116.177.168.95.in-addr.arpa IN NS tert.dnspro.de 100000s (1.03:46:40)
116.177.168.95.in-addr.arpa IN NS ns10.dnspro.de 100000s (1.03:46:40)
116.177.168.95.in-addr.arpa IN NS quart.dnspro.de 100000s (1.03:46:40)
116.177.168.95.in-addr.arpa IN PTR 95.168.177.116.internetserviceteam.com 100000s (1.03:46:40)

Comments»

1. Scrub - June 27, 2009

WHOIS – 92.48.122.3

Location: Unknown

ARIN says that this IP belongs to RIPE; I’m looking it up there.

Using 28 day old cached answer (or, you can get fresh results).
Displaying E-mail address (use sparingly — this will make it more likely that you will trigger our rate limiting system).

% This is the RIPE Whois query server #1.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Information related to ‘92.48.122.0 – 92.48.122.31′

inetnum: 92.48.122.0 – 92.48.122.31
netname: PH-V3SERVERS-28069
descr: v3servers
country: RS
admin-c: SA4464-RIPE
tech-c: SA4464-RIPE
status: ASSIGNED PA
mnt-by: blueconnex-mnt
mnt-routes: blueconnex-mnt
source: RIPE
remarks: ******************************************************
remarks: Please contact abuse@v3servers.net for any abuse issues
remarks: E-mail sent to other addresses may not be acted upon.
remarks: ******************************************************
changed: rob.mitchelmore@bluesquaredata.com 20080605
changed: rob.mitchelmore@bluesquaredata.com 20080606

person: Sogreev Anton
address: v3Servers.net
address: 12 Knez Mihailova
address: apt. 18
address: Belgrade
address: 11000
address: Serbia
phone: +381 (0)11 124-1264
nic-hdl: SA4464-RIPE
changed: rob.mitchelmore@bluesquaredata.com 20080605
mnt-by: blueconnex-mnt
source: RIPE
e-mail: mail@v3servers.net
e-mail: abuse@v3servers.net

% Information related to ‘92.48.64.0/18AS29550′

route: 92.48.64.0/18
descr: Blueconnex Networks Ltd
origin: AS29550
remarks: ***********************************
remarks: * *
remarks: * Abuse: abuse@blueconnex.net *
remarks: * *
remarks: * Peering: peering@blueconnex.net *
remarks: * *
remarks: ***********************************
mnt-by: blueconnex-mnt
source: RIPE
changed: brian.ross@netsumo.com 20080718

[The following lines added by http://www.dnsstuff.com per requirement by RIPE]
This service is subject to the terms and conditions stated in the RIPE NCC Database Copyright Notice.
Contact dnsstuff.com’s ‘info2@’ address to report problems regarding the functionality of the service.

Reply