LucaBrasi
Stranger
Reged: 09/23/03
Posts: 10
|
|
http://www.itn-doctors.com/
This website claims to have alot of hard to come by medications.
I don't know if they are real or not. According to the site they even send scripts with the meds.
They sound too good to be true, but they use PayPal to take credit card orders. If they were a scam this would be really dangerous for them to do. Maybe they are real.
Please let me know if you think they are credible.
|
efffbeee
Member
Reged: 10/22/02
Posts: 115
Loc: usa
|
|
"ROHIPNOL* - (Fluniratzepam) 1mg (100.) 189 USD
Rohipnol is prohibited in the US, and is hereby not for sale"
They sell methamphetamine (along with many other scheduled meds) and have the above disclaimer...I find it kind of funny...
Chances of this being legit are extremely small. Though if its easy to do a chargeback I guess there isn't too much to lose? (I've never done chargebacks so I dont know how it works)
If you do decide to try it, please let us know how it goes.
|
voyager
Old Hand
Reged: 04/17/03
Posts: 415
Loc: United States Virgin Islands
|
|
Remember, IF it sounds to good to be true, it probably is. If these people were able to consistently provide these types of meds on a regular basis without much in the way of htiches and without legitimate scripts, this operation would have to be controlled by the mob in some way.
Meds like methamphetamine,etc are way to controlled for that type of distribution.
I would never waste my money. If you reallly need that type of medication, go find a doc here that will prescribe it. You have a better chance of getting that way then sending your money to IOP's all of the world and hope that one finally comes thru.
Voyager 
|
wcs42
Member
Reged: 03/25/03
Posts: 143
Loc: ky usa
|
|
Quote:
http://www.itn-doctors.com/This website claims to have alot of hard to come by medications.They sound too good to be true, but they use PayPal to take credit card orders. If they were a scam this would be really dangerous for them to do. Maybe they are real. Please let me know if you think they are credible.
IN my experence any outfit offering SCH 2 drugs. Is a SCAM . You will have better luck buying off the street.. IMHO wcs
--------------------
"They that can give up essential liberty to obtain a little temporary safety deserve neither liberty or safety" Ben Franklin
|
tomngrady
Stranger
Reged: 07/29/03
Posts: 17
Loc: USA
|
|
I find interesting that they have a US phone and FAX number
listed:
"Phone: (206) 600-7361
Fax: (775) 361-6682 "
206 area code is in the Seattle, WA area isn't it ???
Anyone tried to call them ?
The percocet prices are reasonable for an OP, if
in fact this place is for real. Most visa and MC
transactions are GUARANTEED, i.e. if you never receive
the product you don't pay for it. Of course, you would
have trouble explaining buying Sched. II's by phone
and having them shipped. 
|
tomngrady
Stranger
Reged: 07/29/03
Posts: 17
Loc: USA
|
|
Voyager, I just find it funny you said
"If you reallly need that type of medication, go find a doc here that will prescribe it"
well if that were so easy, we would all have already
found a doc and wouldn't be online looking for one would we ?
|
Dukey
Journeyman
Reged: 09/24/03
Posts: 88
Loc: New England
|
|
Your right the area code on the phone number is Seattle, the fax number is Reno, Nevada.
A reverse lookup on the two numbers comes up empty.
There selling DXM for $5 a pill. Who the hell would want that?
|
scottntexas
Stranger
Reged: 03/24/03
Posts: 19
Loc: Texas
|
|
using Paypal, you always have recourse both throgh PP and your CC Co. If they do not deliver, either PayPal or nyour CC company will refund.
|
loriludy
Stranger
Reged: 10/15/02
Posts: 3
|
|
HI if they are connected... they are definitely NOT legit. I lost $150 to that company trying to buy amphetamines, paid through paypal and fell for the "could you please be patient for a couple more days" (until the 30 day paypal refund policy expired) Live and learn. They are professional con artists-very convincing!
|
Trampy
Pooh-Bah
Reged: 04/02/02
Posts: 1241
Loc: Southwest U.S.
|
|
The 206 phone number is answered with voicemail ... i missed the name on the message. The 775 is a Callwave free fax number that's working.
Waigani is in Papua, New Guinea. daous.com has IP address 62.236.160.132; ns.daous.com is 194.100.97.29; and ns2.daous.com is 212.182.218.6. The thing that makes the IPs suspicious is that they're so far away from each other. We need a network sleuth to find out where their web site is being hosted.
This could be a sting. The 100-mg Viagra is $2 a tablet. Sounds like a loss leader to get more orders.
Almost everything they sell has abuse potential, except for Dilantin and a few others.
Trampy
---
Domain Name: ITN-DOCTORS.COM
Registrant:
ITN DOCTORS LTD
Vincenzo de Meucci ([email protected])
PO BOX 7010
Waigani
,323040
FI
Tel. +358.3277346
Creation Date: 09-Jul-2003
Expiration Date: 09-Jul-2004
Domain servers in listed order:
ns.daous.com
ns2.daous.com
Administrative Contact:
ITN DOCTORS LTD
Vincenzo de Meucci ([email protected])
PO BOX 7010
Waigani
,323040
FI
Tel. +358.3277346
Technical Contact:
ITN DOCTORS LTD
Vincenzo de Meucci ([email protected])
PO BOX 7010
Waigani
,323040
FI
Tel. +358.3277346
Billing Contact:
Daous
Daous Internet Services ([email protected])
Hameenkatu 28 2f
Turku
null,20700
FI
Tel. +358.22535147
Status: ACTIVE
--------------------
Your mileage may vary ...
|
zorg
Veteran
Reged: 04/29/02
Posts: 559
Loc: Midwest
|
|
Exhaustive report coming within a couple hours
|
zorg
Veteran
Reged: 04/29/02
Posts: 559
Loc: Midwest
|
|
Interesting little web of obfuscation they have going on over there. This much is for sure:
www.itn-doctors.com/212.182.218.33
is on an ethernet direct upstream connect, likely a colo facility, in or within a few miles of "Turku, Finland:"
person: Rolf Moller
address: Auria Turun Puhelin Oy
address: Linnankatu 4
address: 20100 Turku
address: FINLAND
ns.daous.com/62.236.160.130 is on an ethernet direct upstream connect, likely the same colo facility, in or within a few miles of "Turku, Finland:"
person: Mikko Sahlbom
address: Lopsi Ltd. Oy
address: Voimakatu 5, 20520 Turku
address: Finland
ns2.daous.com/212.182.218.6 is on an ethernet direct upstream connect, in the same colo facility as the main site www.itn-doctors.com and ns.daous.com, just on different VLANS, selling bandwidth to each other:
person: Rolf Moller
address: Auria Turun Puhelin Oy
address: Linnankatu 4
address: 20100 Turku
address: FINLAND
The disparity in IP numbers doesn't mean anything at all since the advent of portable classless subnets. many ranges show up on the same router on different interfaces, such as the 6 or 7 providers in this Finland colo breaking down to tiny subnets such as /29 and /28.
Last 3 hops for itn-doctors:
14 auria-gw.customer.eunetip.net (213.192.190.62) 162.355 ms 162.239 ms 162.372 ms
15 tp--tku-g01.lansilinkki.net (212.83.96.161) 163.470 ms 163.568 ms 162.741 ms
16 212.182.218.33 (212.182.218.33) 164.156 ms !N 165.002 ms !N 164.221 ms !N
Last 3 hops for ns.:
18 kes2-gw1.tku.fi.sn.net (62.236.1.158) 157.550 ms 157.265 ms 157.092 ms
19 tkudaous-cp1.fi.sn.net (62.236.9.46) 159.371 ms 159.170 ms 158.918 ms
20 62.236.160.130 (62.236.160.130) 159.870 ms 159.768 ms 159.418 ms
last 3 hops for ns2.:
14 auria-gw.customer.eunetip.net (213.192.190.62) 162.094 ms 162.455 ms 162.478 ms
15 tp--tku-g01.lansilinkki.net (212.83.96.161) 162.872 ms 162.951 ms 163.246 ms
16 nuoli.com (212.182.218.5) 163.925 ms !N 163.559 ms !N 163.604 ms !N
The whole shebang is physically in Finland, that is 100% sure. I've seen a web of registrars and netblock owner records that are common to scam sites and other sites hosting unpopular material. What I haven't seen any hint of is law enforcement. I have noticed that server headers are stripped wisely of version numbers, and name servers are wisely locked down from me transferring their entire domain zone file.
Final point is, they're hiding PRETTY well over there in Finland, hard to find for the scammed seeking justice, and it's MOST UNLIKELY to be law-enforcement related. Not a trace of any kind, and further supported by residing in "freedom lans" Holland/Finland.
One last paste for kicks, this shows the de-aggregation (slightly out of order, look for the big subnets) of providers from the big european/US peers (to the small subnets for itn. ns and ns2 look similar except ns is purchasing bandwidth from a different provider, just for physical and provider redundancy:
[Querying ripe]
[ripe]
% This is the RIPE Whois server.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net/ripencc/pub-services/db/copyright.html
inetnum: 212.182.218.0 - 212.182.218.63
netname: DAOUS-TKU-NET
descr: Daous Oy
descr: H?meenkatu 28 F
descr: 20100, Turku
country: FI
admin-c: DM573-RIPE
tech-c: RM7972-RIPE
tech-c: MH14627-RIPE
tech-c: KK2824-RIPE
tech-c: JO2466-RIPE
tech-c: RM7972-RIPE
status: ASSIGNED PA
notify:
mnt-by: LANSILINKKI-MNT
changed: 20020206
source: RIPE
route: 212.182.192.0/18
descr: Westlink Ltd.
origin: AS12917
notify:
mnt-by: LANSILINKKI-MNT
changed: 20010507
source: RIPE
person: Daous Margarita
address: Daous Oy
address: H?meenkatu 28 F
address: 20100, Turku
address: FINLAND
phone: +358 2 2535147
e-mail:
nic-hdl: DM573-RIPE
notify:
mnt-by: LANSILINKKI-MNT
changed: 20020206
source: RIPE
person: Jyrki Ojala
address: Auria Turun Puhelin Oy
address: Linnankatu 4
address: 20100 Turku
address: FINLAND
phone: +358 2 262 1618
fax-no: +358 2 262 1413
e-mail:
nic-hdl: JO2466-RIPE
notify:
mnt-by: AURIATP-MNT
changed: 20010507
source: RIPE
person: Marko Hakkarainen
address: Auria Turun Puhelin Oy
address: Linnankatu 4
address: 20100 Turku
address: FINLAND
phone: +358 2 262 1744
fax-no: +358 2 262 1413
e-mail:
nic-hdl: MH14627-RIPE
notify:
mnt-by: AURIATP-MNT
changed: 20000417
changed: 20000515
changed: 20000627
changed: 20001101
changed: 20010507
source: RIPE
person: Kari Koponen
address: Auria Turun Puhelin Oy
address: Linnankatu 4
address: 20100 Turku
address: FINLAND
phone: +358 2 262 1535
fax-no: +358 2 262 1413
e-mail:
nic-hdl: KK2824-RIPE
notify:
mnt-by: AURIATP-MNT
changed: 19950628
changed: 19990615
changed: 20000131
changed: 20000417
changed: 20010507
source: RIPE
person: Rolf Moller
address: Auria Turun Puhelin Oy
address: Linnankatu 4
address: 20100 Turku
address: FINLAND
phone: +358 2 262 1617
fax-no: +358 2 262 1413
e-mail:
nic-hdl: RM7972-RIPE
notify:
mnt-by: AURIATP-MNT
changed: 20000417
changed: 20001116
changed:
mnt-by: LANSILINKKI-MNT
changed: 20020206
source: RIPE
route: 212.182.192.0/18
descr: Westlink Ltd.
origin: AS12917
notify:
mnt-by: LANSILINKKI-MNT
changed: 20010507
source: RIPE
person: Daous Margarita
address: Daous Oy
address: H?meenkatu 28 F
address: 20100, Turku
address: FINLAND
phone: +358 2 2535147
e-mail:
nic-hdl: DM573-RIPE
notify:
mnt-by: LANSILINKKI-MNT
changed: 20020206
source: RIPE
person: Jyrki Ojala
address: Auria Turun Puhelin Oy
address: Linnankatu 4
address: 20100 Turku
address: FINLAND
phone: +358 2 262 1618
fax-no: +358 2 262 1413
e-mail:
nic-hdl: JO2466-RIPE
notify:
mnt-by: AURIATP-MNT
changed: 20010507
source: RIPE
person: Marko Hakkarainen
address: Auria Turun Puhelin Oy
address: Linnankatu 4
address: 20100 Turku
address: FINLAND
phone: +358 2 262 1744
fax-no: +358 2 262 1413
e-mail:
nic-hdl: MH14627-RIPE
notify:
mnt-by: AURIATP-MNT
changed: 20000417
changed: 20000515
changed: 20000627
changed: 20001101
changed: 20010507
source: RIPE
person: Kari Koponen
address: Auria Turun Puhelin Oy
address: Linnankatu 4
address: 20100 Turku
address: FINLAND
phone: +358 2 262 1535
fax-no: +358 2 262 1413
e-mail:
nic-hdl: KK2824-RIPE
notify:
mnt-by: AURIATP-MNT
changed: 19950628
changed: 19990615
changed: 20000131
changed: 20000417
changed: 20010507
source: RIPE
person: Rolf Moller
address: Auria Turun Puhelin Oy
address: Linnankatu 4
address: 20100 Turku
address: FINLAND
phone: +358 2 262 1617
fax-no: +358 2 262 1413
e-mail:
nic-hdl: RM7972-RIPE
notify:
mnt-by: AURIATP-MNT
changed: 20000417
changed: 20001116
changed:
|
Post Extras:    |
|
|
zorg
Veteran
Reged: 04/29/02
Posts: 559
Loc: Midwest
|
|
There's a good chance itn-doctors location is in or very near this picture 
http://www.safa.fi/europan/vanhat/pics/e5/turku_ilmak_iso.jpeg
|
John0023
Stranger
Reged: 08/12/02
Posts: 13
Loc: Tx
|
|
I have no idea what the f*** you just said, but it sounds like they're scammers.
|
Dukey
Journeyman
Reged: 09/24/03
Posts: 88
Loc: New England
|
|
in someone's garage like the rest of em
|
actonbell
Journeyman
Reged: 09/08/03
Posts: 82
Loc: Oklahoma
|
|
wow sonick. That is so great. LOL. even a picture of where they might be located. 
--------------------
All it takes to fly is to hurl yourself at the ground....and miss.
|
Trampy
Pooh-Bah
Reged: 04/02/02
Posts: 1241
Loc: Southwest U.S.
|
|
Well, thanks to Sonick, if you get scammed there's now plenty of phone numbers in Finland to call and complain about it. But it makes no sense for a Finnish scam operation to have a valid Seattle phone number (unless it's not their phone number after all .. which could possibly be confirmed by calling ... advisedly from a pay phone). Maybe it went straight to voicemail last night only because the person was on the phone.
And there's a big difference between Dutch and Finnish culture. Finland is like all the other Scandinavian countries when it comes to drugs; it's no Spain or Thailand.
itn-doctors can obfuscate their web server, but if they're in Finland they can't hide their identity from the bank that processes their credit card receipts or is hooked up to their PayPal account. PayPal requires bank account verification for all their non-U.S. accounts and any U.S. accomplice used to transfer the money going into a personal PayPal account could be very easily caught (especially if it's the owner of that Seattle telephone number). PayPal will also close down the account if they get just one e-mail informing them of the nature of the goods being offered.
Nobody in the U.S. or in the entire EU can now open a bank account without good identification. Finland has no banking secrecy laws like the Turks & Caicos do. Even Switzerland no longer offers much privacy for bank accounts when criminal conduct is simply alleged. There is probably no country in the world that is open to commerce with the U.S. that offers full banking secrecy and that would tolerate the illegal international distribution of all those drugs. Finland? No way!
It'd be very easy to follow the money trail to shut down an illegal drug distribution enterprise that is ostensibly selling methadone and methamphetamine and operating so blatantly. U.S. law enforcement can be pretty good at network security tracking as well as stealthing ... and the Finns would help out 100%. The Finnish police could track the cable to the server's room and monitor all the e-mails that go there.
If they were a scam operation with any intelligence they'd be asking for payments that are difficult to trace. But PayPal? It wouldn't last a month. PayPal (and Finland) would gladly cooperate with U.S. DEA/FDA/Customs.
The FDA said recently that they're going to start going after buyers. This could be the start of it.
Trampy
--------------------
Your mileage may vary ...
|
bernie131
Member
Reged: 09/17/03
Posts: 112
|
|
WOW, you have the knowledge and resources so you would suggest trying it?
--------------------
survivor
|
zorg
Veteran
Reged: 04/29/02
Posts: 559
Loc: Midwest
|
|
Culture and extradition/cooperation was definetely an element I was hoping you'd follow up on. Like you said they've woven a considerable e-web but can't hide from the money trail or even better, the hardware trail for someone physically over there.
Interesting times we're living here, I can't say that I would be too eager to order CII's from Finland personally.....
To the person that asked if I would recommend ordering based on what I've seen, I would be extremely hesitant based on e-murkiness and the culture/legal aspects Trampy laid out. I can't say I would order from them, so definetely 'no' in my opinion.
Thanks Trampy, regardless of our collaberative synergy It would be neat to put all of these enumeration techniques in a single script and charge 4.99 per report.....
|
zorg
Veteran
Reged: 04/29/02
Posts: 559
Loc: Midwest
|
|
stumbled on this looking for more data on the washington voice line and the nevada fax line:
TradeBlaster.biz
7/22/03: Tradeblaster.biz grande opening. > More. Phone:
(206) 600-7361 Fax: (775) 361-6682. PO Box 74, 00131 Helsinki Finland, Eu. ...
www.tradeblaster.biz/ - 11k - Cached - Similar pages
tradeblaster.biz yet another Turku-area entity, same end registrant as itn-doctor, daous name servers & SOA, and 212.182.218.34, one up from ns2 i believe.
The plot thickens
|
zorg
Veteran
Reged: 04/29/02
Posts: 559
Loc: Midwest
|
|
Noteable: tradeblaster is now the third server to display the same characteristics of stripped apache version numbers, there is a single thread among ALL these entities down to a single engineer or perhaps a colo package. I'd say it could be ethernet subinterfaces but the routes shouldn't change unless they were stupid enough to put multiple subnets on single physical segment.
One more noteworthy, tradeblaster.biz is filtering ICMP TTL-EXPIRED inbound unlike the itn/ns/ns2 routes:
14 auria-gw.customer.eunetip.net (213.192.190.62) 162.944 ms 162.715 ms 162.660 ms
15 tp--tku-g01.lansilinkki.net (212.83.96.161) 163.634 ms 162.846 ms 162.904 ms
16 * * *
17 *
a slightly more robust set of IP filters it would appear. Perhaps even accidental.
weird
|
zorg
Veteran
Reged: 04/29/02
Posts: 559
Loc: Midwest
|
|
ONE more for now, I didn't mention this last night because I figured it was temporary and would be restored today, but THIS is shady:
[root@kraken sec]# whois auria.fi
[Querying ]http://cgi.ficora.fi/wwwbin/domains.pl]
Not Found
The requested URL /wwwbin/domains.pl was not found on this server.
_________________________________________________________________
Apache/1.3.27 Server at cgi.ficora.fi Port 80
------
whois service redirects to an apache server to a script that hasn't existed for almost 24 hours at least. How convenient that they don't have a diligent registrar!
Shady, strange, unique, all of it.
|
Trampy
Pooh-Bah
Reged: 04/02/02
Posts: 1241
Loc: Southwest U.S.
|
|
Finland is known for being "... and free of crime and corruption":
http://www.forbes.com/2003/10/31/cx_da_1031topnews.html
--------------------
Your mileage may vary ...
|
TwG
Journeyman
Reged: 06/17/02
Posts: 68
|
|
Oxycontin is spelled wrong, and they don't make 15 mg percocet. This site is a joke.
|
milali
Stranger
Reged: 08/16/03
Posts: 13
Loc: S.E. Michigan
|
|
All I can say is WOW! Sonic, you and Trampy are just too much! 
You guys -- and all of you others DB'ers are so sharp. Thanks for being there.
This place sounds pretty cheesy to me, too. The amphetamines would seem to be the give away never seen them offerred thay way (and I've been around).
Thanks, again! 
|
dsack
Veteran
Reged: 01/20/02
Posts: 532
Loc: midwest
|
|
I don't understand why some of you are putting all this time and energy into checking whether or not this site is legit. Just looking at the pain medication section- First of all, like someone else stated, Oxycontin is misspelled. 2nd- $729 for 90 tabs of 80mg.?- Dream on. And while I'm right there, 90 tabs?- They're sold in 100 tablet bottles even overseas. How about the prices they use?-$729, $189,$264,$223? I'm not falling for it. It's very obvious that they are thinking by using the oddest numbers possible in their pricing, that they must be the real thing. C'mon folks, it's not worth the effort. Some of you are demonstrating some very impressive dectective work, but to me, it's a matter of how hard I laugh when I see such a blatant insult to my intelligence that lets me know.....SCAM. Some people say that when they see oxy offered, that is their red flag. 90% of the time this is true, but for me, Dexadrine is even more of a red flag. JMO.
|
Pharmacology
Stranger
Reged: 11/04/03
Posts: 2
|
|
If you read int-doctors site carefully you'll realize that anything you want they got or can get. Even if they did spell oxycontin right i'd still say it's a scam. Anyways you get what im saying.
|
who_am_i
Member
Reged: 12/12/01
Posts: 114
Loc: Southern USA
|
|
Oxy from a website? I doubt it. Has it ever happened before?
|
Previous
Index
Next
Threaded
Edit 
Reply 
Quote 
