Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

An Incredible Canadian Pharmacy is available at your Fingertips!
*No~Doctor~Needed*! Browse our Site Today! -> http://dependprefer.com

Header Analysis

The following IP addresses were extracted from your headers:

IP Address	Probable Country	Additional Info
207.115.20.125	United States (Richardson)*	Whois	Google	DNSStuff	Urgentmessage.org
61.161.148.135	China (Shenyang)*	Whois	Google	DNSStuff	Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Barbra Yang Wed Jul 1 18:30:12 2009
Return-Path:  <b_yangcl@tacocity.com.tw>
Authentication-Results: mta130.sbc.mail.mud.yahoo.com from=tacocity.com.tw; domainkeys=neutral (no sig); from=tacocity.com.tw; dkim=neutral (no sig)
Received: from 207.115.20.125 (EHLO flpd115.prodigy.net) (207.115.20.125)
by mta130.sbc.mail.mud.yahoo.com with SMTP; Wed, 01 Jul 2009 18:32:23 -0700
Received: from 91pmey1 ([61.161.148.135])
by flpd115.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n621WIwh005457;
Wed, 1 Jul 2009 18:32:20 -0700
Message-ID: <000701c9fab4$a4f5cfc0$d828ea62@tacocity.com.tw>
Reply-To: “Barbra Yang”  <b_yangcl@tacocity.com.tw>
From: “Barbra Yang”  <b_yangcl@tacocity.com.tw>
To:
Subject: International Pharm get med cheaper online
Date: Wed, 01 Jul 2009 20:30:12 -0500
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 142

Address lookup

canonical name	dependprefer.com.
aliases
addresses	218.75.144.6 222.241.150.146 61.191.191.241 119.39.238.2 203.93.208.86

Domain Whois record

Queried whois.internic.net with “dom dependprefer.com“…

   Domain Name: DEPENDPREFER.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.CHARTFLAT.IN
   Name Server: NS2.CHARTFLAT.IN
   Name Server: NS3.SELLCALL.RU
   Name Server: NS4.SELLCALL.RU
   Name Server: NS5.CIRCLEFRUIT.COM
   Name Server: NS6.CIRCLEFRUIT.COM
   Status: ok
   Updated Date: 29-jun-2009
   Creation Date: 29-jun-2009
   Expiration Date: 29-jun-2010

>>> Last update of whois database: Fri, 03 Jul 2009 08:25:57 UTC <<<

Queried whois.namerich.cn with “dependprefer.com“…

This is a redirector site to the criminal fraud Canadian Pharmacy. 
The name servers that resolve access and the registrars sponsoring the crime are - 
ns1.plumpsize.in ns2.plumpsize.in - Visesh Infotecnics Ltd. (rbaweja@viseshinfo.com) 
ns3.dresshomes.ru ns4.dresshomes.ru - REGRU-REG-RIPN 
ns5.whosetangy.pl ns6.whosetangy.pl - EPAG Domainservices GmbH (support@epag.de)

Dirty NS IP addresses are 
60.191.221.117 (anti_spam@mail.jhptt.zj.cn) 
60.191.239.153 (anti_spam@mail.jhptt.zj.cn) 
61.191.191.241 (anti-spam@ns.chinanet.cn.net) 
119.39.238.2 (abuse@cnc-noc.net) 
203.93.208.86 (abuse@chinaunicom.cn) 
218.75.144.6 (abuse.szx@2118.com.cn)

 DomainName : dependprefer.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS5.CIRCLEFRUIT.COM
Name Server......................NS2.CHARTFLAT.IN
Name Server......................NS3.SELLCALL.RU
Name Server......................NS1.CHARTFLAT.IN
Name Server......................NS4.SELLCALL.RU
Name Server......................NS6.CIRCLEFRUIT.COM
Status...........................ok
Creation  Date ..................2009-06-29
Expiration Date .................2010-06-29
Last Update  Date ...............2009-06-29

Registrant ID ...................V-X-58378-14021
Registrant Name .................WANG JIE
Registrant Organization .........WANG JIE
Registrant Address ..............ZHONGYANGDADAO51
Registrant City..................HZ
Registrant Province/State .......ZJ
Registrant Country Code .........CN
Registrant Postal Code ..........313009
Registrant Phone Number .........+86.057258421551
Registrant Fax ..................+86.057258421551
Registrant Email ................ojanengzx@126.com

Administrative ID ...............V-X-58378-14021
Administrative Name .............WANG JIE
Administrative Organization .....WANG JIE
Administrative Address ..........ZHONGYANGDADAO51
Administrative City..............HZ
Administrative Province/State ...ZJ
Administrative Country Code .....CN
Administrative Postal Code ......313009
Administrative Phone Number .....+86.057258421551
Administrative Fax ..............+86.057258421551
Administrative Email ............ojanengzx@126.com

Billing ID ......................V-X-58378-14021
Billing Name ....................WANG JIE
Billing Organization ............WANG JIE
Billing Address .................ZHONGYANGDADAO51
Billing City.....................HZ
Billing Province/State ..........ZJ
Billing Country Code ............CN
Billing Postal Code .............313009
Billing Phone Number ............+86.057258421551
Billing Fax .....................+86.057258421551
Billing Email ...................ojanengzx@126.com

Technical ID ....................V-X-58378-14021
Technical Name ..................WANG JIE
Technical Organization...........WANG JIE
Technical Address ...............ZHONGYANGDADAO51
Technical City...................HZ
Technical Province/State.........ZJ
Technical Country Code ..........CN
Technical Postal Code ...........313009
Technical Phone Number ..........+86.057258421551
Technical Fax ...................+86.057258421551
Technical Email .................ojanengzx@126.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “218.75.144.6“…

inetnum:      218.75.128.0 - 218.75.159.255
netname:      CHINANET-HN-CD
country:      CN
descr:        CHINANET-HN changde node network
descr:        hunan Telecom
admin-c:      CHC8-AP
tech-c:       CH636-AP
status:       ALLOCATED NON-PORTABLE
changed:      ipaddress@hntelecom.net.cn 20050823
mnt-by:       MAINT-CHINANET-HN
mnt-lower:    MAINT-CHINANET-HN-CD
source:       APNIC

role:         CHINANET HuNan ChangDe
address:      The middle of Wuling Street,Changde 415000
country:      CN
phone:        +86 736 7229427
fax-no:       +86 736 7267027
e-mail:       abuse.cd@2118.com.cn
trouble:      send spam reports to spam.cd@2118.com.cn
trouble:      and abuse reports to abuse.cd@2118.com.cn
trouble:      Please include detailed information and
trouble:      times in UTC
admin-c:      CM1092-AP
tech-c:       CM1092-AP
nic-hdl:      CHC8-AP
notify:       abuse.cd@2118.com.cn
mnt-by:       MAINT-CHINANET-HN-CD
changed:      ipaddress@hntelecom.net.cn 20050818
source:       APNIC

role:         CHINANET HUNAN
address:      No.1 TuanJie road,ChangSha,Hunan 410005
country:      CN
phone:        +86 731 4792092
fax-no:       +86 731 4792007
e-mail:       abuse.szx@2118.com.cn
trouble:      send spam reports to spam.szx@2118.com.cn
trouble:      and abuse reports to abuse.szx@2118.com.cn
trouble:      Please include detailed information and
trouble:      times in UTC
admin-c:      CH632-AP
tech-c:       CS499-AP
nic-hdl:      CH636-AP
mnt-by:       MAINT-CHINANET-HN
changed:      ipaddress@hntelecom.net.cn 20050816
source:       APNIC

DNS records

DNS query for 6.144.75.218.in-addr.arpa returned an error from the server: NameError

name	class	type	data	time to live
dependprefer.com	IN	A	203.93.208.86	10800s	(03:00:00)
dependprefer.com	IN	A	222.241.150.146	10800s	(03:00:00)
dependprefer.com	IN	A	61.191.191.241	10800s	(03:00:00)
dependprefer.com	IN	A	218.75.144.6	10800s	(03:00:00)
dependprefer.com	IN	A	119.39.238.2	10800s	(03:00:00)

— end —