Tag Archive: BANK

Estonian Spammer Forges CBS and The Guardian

Get Rich Quick Scam Forges Genuine News Agencies Web Pages

Gmail Spam

Gmail Spam

I recently received two emails from a friend’s old Hotmail account, but to two of my email addresses.

Email Spam

Email Spam

Probably, the account has been hacked as I could detect no spoofing in the emails’ headers.  These are the emails, with the email addresses blacked out.

Initial Email Investigations

The text is similar in that they try to entice a user using pretty poor English to click on the shortened URL links, which are active.

Here’s how the links work:
To my Email address;
cbsbusiness9

cbsbusiness9

I had http://cbsbusiness9.com/index2.php?/5260 which then goes to

http://cbsbusiness9.com/uk.html?/partners/the-guardian/small-business/5672-9782-67834/making-money-online/

 

To my GMail address;
cbsnews-article

cbsnews-article

I had http://cbsnews-article.com/index2.php?/4032 which then goes to

http://cbsnews-article.com/uk.html?/partners/the-guardian/small-business/5672-9782-67834/making-money-online/

 

The screenshots show the results using a neat Firefox plugin, Flagfox, which displays the source IP address and country on mouse-over.

The WHOIS’s of each domain are almost identical.  These are screenshots.

whois.domaintools.com screen capture 2012-12-12-17-12-26 whois.domaintools.com screen capture 2012-12-12-17-13-17 That Arthor Brown’s a one, eh?  Notice the Ukrainian, Russian and New York connections?   Who is/are  or what is:

TNew line ave 172 95
NY, 18274
UNITED STATES
+1.7343541732

Google Search on +1.7343541732

Google Search on +1.7343541732

Googling the phone number pulls out a heap of (not)surprises including an awful cesspit of scamminess that’s now starting to rival Pacific Webworks’ Google Treasure Chest and Jesse Willms’ Colon cleansing efforts!  (We saw these scams a few years back – check the links)

Just check out the fake news and dodgy sounding sites in the search results….  These are the first couple of pages of current search results:

  • Com-news8.net
  • Bcnews8.com
  • Dildobigg.com
  • Raspberry-Ketone24.com
  • BigGgEts.com
  • HurtGuys.com
  • GrowsPeniss.com
  • HugerAss.com
  • Com-news9.net
  • Com-nbcnews9.net
  • coloncleanse-extreme.com
  • nbc9news.com
  • nbc1news.com

Arthor Brown is in most of them with his Yahoo! email address as [email protected]   Please don’t confuse him with this Arthur Brown, but yes, handle all of these websites like Fire!

Forged Webpages of The Guardian Newspaper

cbsnews-article.com screen capture 2012-12-12-16-3-51

cbsnews-article.com screen capture 2012-12-12-16-3-51

cbsbusiness9.com screen capture 2012-12-12-16-3-23

cbsbusiness9.com screen capture 2012-12-12-16-3-23

The Guardian, is an old and respected news organisation in the UK.  CBS is a long-established US media network.

They, and the purported author of both webpages, Sirena Bergman, must be pretty pissed off about the hijacking of their names.

Also to be annoyed, is Lloyds TSB Bank who apparently are “in association” with this get rich quick scheme for work at home moms!

Completely Forged News Articles!

Indeed they are.

  • The articles are dated “December, 11:41”, which is odd since there’s no day, just month and time!
  • Both articles are embedded in genuine Guardian web-pages, with all the links surrounding the article going to genuine Guardian web-pages or genuine advertiser websites!
  • The hook links in both forged webpages go to http://workinghome22.com/go.php

The forgery is done in the same manner as the well-known phishing scams done for banks and on-line finance and insurance.

Apart from the images sourced from The Guardian, the scammer’s images are sourced from:

  • ddmcdn.com which is HowStuffWorks.com!
  • localconsumeralerts.com
  • prosperadtracker.com
  • ophan.co.uk

So, Who Is workinghome22.com

Bad Gateway

Bad Gateway

The first link was dead, opening a bad gateway so the expected redirect didn’t work.  The tracking pointed back to Ireland!

Bad Gateway

Bad Gateway

The second link worked, but the sweetly named workingfromhome22.com wasn’t the destination.   No, the link immediate re-directed to http://onlineincnow.com/2/?aff_sub=72

Well, at least the affiliate number 72 is getting paid….

But hang on, who exactly is workingfromhome22.com?
workinghome22.com screen capture 2012-12-12-16-31-44

workinghome22.com screen capture 2012-12-12-16-31-44

Well, typing the URL directly takes me to workingfromhome22.com!  This is it!

Cunningly, you’ll note that it’s pulled out my home-town as Bournemouth (where I live) with that awful “mom” Americanism!  No-one in the UK addresses their mother as mom…  I mean, FFS?

The webpage links, containing the disreputably used graphics of Thomson, Reuters, CNBC and NBC Universal all point to http://workinghome22.com/go.php, which is of course in this domain.  So let’s click it, shall we?

Well, pctrck.com is trying to load, but not much else.

Reversing then trying to exit workinghome22.com produces a pop-up of dubious functionality!  Check the words – there’s no cancel button!

workinghoome22_Popup

workinghoome22_Popup

I did however manage to successfully close this page following that.  Whew!

Now Back to onlineincnow.com

OnlineIncNow Location

OnlineIncNow Location

The previously mentioned http://onlineincnow.com/2/?aff_sub=72 is located in the USA.

So What Is It Up To?

OnlineIncNow.com Whois Record

OnlineIncNow.com Whois Record

Good Question!   A WHOIS puts the registrant in China with the DNS servers in Russia!

As I mentioned earlier, the similarity of the scamminess of this thing is just like the Google Treasure Chest/ Google Money Tree / PWW scams of old.

The site is plastered with the logos of well known businesses to ad an air of authenticity to things (just as the original hook sites used The Guardian Newspaper and CBS in the same way) yet at the bottom of the page they disingenuously ad:

This site and the products and services offered on this site are not associated, affiliated, endorsed, or sponsored by NBCNEWS, ABC, USA Today, CNN or Fox News, nor have they been reviewed tested or certified by NBCNEWS, ABC, USA Today, CNN or Fox News.

onlineincnow.com T&C Screenshot

onlineincnow.com T&C Screenshot

Despite all this, it is of course bollox set to deceive.  In fact, it now appears that it’s the well known negative option scam, used by Pacific Webworks (PWW) and Jesse Willms to good effect until they were found out.

Let’s see how this pans out, shall we?…..

Check out the T&C page from the tiny link in the page footer – screenshot on the right.

  • They say that the applicable law is the State of Florida.
  • You will become a “member” and the key phrases are here:

You must register as a “Member” with Online Income Now to access certain functions of the website. You must provide current, complete and accurate information about yourself (the “Registration Data”) when registering as a Member. You agree that such information is truthful and complete. You agree to maintain and keep your Registration Data current and to update your Registration Data as soon as it changes. You are responsible for maintaining the security of your password. Online Income Now is not liable for any loss that you suffer through the use of your password by others. You agree to notify Online Income Now immediately of any unauthorized use of your account or other breach of security known to you. You also, by becoming a Member, agree to report violations of these Terms and Conditions by others to Online Income Now.

For a limited time only, the cost of this product is $97.00 ( usual price $299.95 ) and every 32 days thereafter you will be billed the member’s only price of $9.95 for the monthly use.

MATERIALS PROVIDED TO Online Income Now OR POSTED AT ANY Online Income Now’s WEB SITE

Online Income Now does not claim ownership of the materials you provide to Online Income Now (including feedback and suggestions) or post, upload, input or submit to any Online Income Now Web Site or its associated services (collectively “Submissions”). However, by posting, uploading, inputting, providing or submitting your Submission you are granting Online Income Now, its affiliated companies and necessary sublicensees, permission to use your Submission in connection with the operation of their Internet businesses including, without limitation, the rights to: copy, distribute, transmit, publicly display, publicly perform, reproduce, edit, translate and reformat your Submission; and to publish your name in connection with your Submission.

You’ll see that “Online Income Now” will:

  • make you a “member” (of what?)
  • and you will be regularly billed, (why?)
  • and that for anything you post, upload etc (wah?  whadya mean?  Where is this uploading?),  “Online Income Now” will take no responsibility for what you do!

…………….which is curious as you don’t know what you’ll be doing and they have invited you to do it in the first place!!!

Now Lets Click The Link!  Follow that Opportunity!

onlineincnow.com screen capture 2012-12-12-17-46-50

2 Spots Left!

Amazingly (sarcasm alert) there are two “spots” left in my area!  This is the page… http://onlineincnow.com/2/index2.php

Michelle Johnson is the “guru” who will tell me everything!  So what do I do?  I have two options:

  • Back out
  • Sign up

Let’s Try Backing Out, Shall We?

CannotBackoutFromOnlineIncNow2

Cannot Backout From OnlineIncNow 2

CannotBackoutFromOnlineIncNow

Cannot Backout From OnlineIncNow

Well of course, they won’t let me.  It takes two goes to get out and the first one completely takes over the browser!  Bad.  This is B.A.D.

Ah, well.  Finally escaped.

Let’s Try Clicking to the Signup Page, Shall We?

secure.onlineincnow.com Data Entry Screen

secure.onlineincnow.com Data Entry Screen

I decide on my name, “Jobless Jake” and a random phone number…. The website is now https://secure.onlineincnow.com/2/cc_97.php

What I see is bad, really bad, and any attempt by this pack of jokers at saying they don’t run a negative option scam is now revealed on this sign-up page!

The scam is now revealed for what it is – a negative option scam!        Read it carefully…..  They expressly say;

By enrolling, you will be charged a one-time fee of $97.00

In teeny-tiny letters, note!

But remember, right back buried in the T&C’s they say;

every 32 days thereafter you will be billed the member’s only price of $9.95 for the monthly use.

This is expressly against the FTC code and laws in most countries.  If any extra charges are to be levied for any service or goods, they should be expressly stated on the sign-up page where the customer first enters their financial details.

Gotcha! You Bastards!

Okay, I’ve Had Enough of This. I’m Off!

“Not so fast, young Jobless Jake”, say onlineincnow.com……!

CannotBackoutFromOnlineIncNow3

Cannot Backout From OnlineIncNow 3

They’ve an extra 20% off plus and extra bit of webpage-erese!  The screenshot says it all, though it wasn’t the end of it.  I had one more “Leave Page” option like the earlier one above.

Conclusion

Negative Options are banned by law in most countries.  If you get collared by one, you’ll have a job stopping the bastards taking money from your account for ages.  The only sure way to stop this once you’ve been sucked in is through….

  • Chargebacks.   Get your bank or card company to get a charge-back saying the terms of trade or purchase were hidden (as seen in my screenshot above).

So………………….

  • It’s a scam.
  • Stay away from it.


Enhanced by Zemanta

Related Posts:

Good News on Google Scams – Consumers Get Money From FTC

Google Treasure Chest Pay Back to Innocent, Duped, Scammed Consumers

FTC Issues Cheques for Google Scams

FTC Issues Cheques for People Duped by Google Scams

It was over three years ago that I first came across a scam, centred around Pacific Webworks (PWW), mainly under the Google Treasure Chest and Google Money Tree monikers.  As I delved deeper, along with other folks, we came across the true scale of the scam.  Our researches then took us into similar scams run by Jesse Willms, all using the same modus operandi of:

  • negative option marketing
  • illegal cash withdrawals from bank accounts
  • a myriad network of affiliates
  • fake or holding addresses, many in foreign countries outside the normal laws, that opened and closed rapidly allowing consumers no come-back
  • illegal medical or wealth claims
  • offshore banking, now known following the recent banking scandals to be heavily centred around the City of London

We always recommended that consumers issue a credit card charge-back against PWW and Willms.  This is the only way to stop the withdrawals and to counter the “businesses” operations at source.   And it worked!

Yesterday, the USA’s FTC issued a statement as well as money in the form of cheques to all consumers known to have been defrauded by PWW and others in the Google Treasure Chest/Money Tree scam.  Their statement is here: FTC Returns More than $2 Million to Buyers of the “Google Money Tree” Work-at-Home Scam.  They say,

Under a settlement agreement with the FTC, the defendants are banned from selling products through “negative option” transactions, in which the seller interprets consumers’ silence or inaction as permission to charge them, and are also prohibited from making misleading or unsupported claims while marketing or selling any product or service. The settlement also required the defendants to surrender cash and other assets, and these are now being used by the FTC to refund consumers who bought the “Google Money Tree,” “Google Pro,” or “Google Treasure Chest” products.

They also include instructions for people who haven’t yet claimed – so if you were conned into getting rich with Google or similar, contact them now and get at least part of your money back!  This is what they said,

The checks will be mailed by an administrator working for the FTC. Consumers who made purchases from “Google Money Tree,” “Google Pro,” or “Google Treasure Chest” will receive approximately $24.50.  Consumers who have questions, or who have not yet filed a complaint with the FTC and wish to do so, should call the Redress Administrator, Gilardi & Co. LLC, toll free, at 1-877-226-2847. Consumers seeking general information about the FTC’s redress program may visit the FTC’s refunds website.  The FTC never requires consumers to pay money or provide information before redress checks can be cashed.

Checks will be mailed on September 11, 2012, and must be cashed on or before November 12, 2012.

So get on in there folks!


Crime Pays, But Not Always – added on 18 Sep 2012

Here’s a reminder of how crime does not pay – the Pacific Webworks share price!

PWW 5yr share history

PWW 5yr share history

Since the successive hits on PWW following our and others’ investigations their share price has languished at around a penny for about half the past year!  Their meteoric rise, right as the depression started to hit, was entirely due to conning vulnerable people in desperate times.

  1. Then folks like me started shouting!
  2. Then Google took note and sued them.
  3. Then the FTC laid charges.
  4. Then they were found to have funny-looking accounts and changed their accountants and management.
  5. Now they’ve had to pay out to the very people who were conned.

So as I just said,

Get on in there folks!


Enhanced by Zemanta

Related Posts:

Comments are closed

Victory! Or is it Victory? Jesse Willms Surrenders All to FTC Onslaught.

Jesse Willms Folds Following Consumer-Led Pressure on FTC and Other Law Agencies

Seal of the United States Federal Trade Commis...Willms et al to Pay $359,291,898

Jesse Willms, (the Canadian who set the legal dogs, financed by his scamduggery, onto me, for telling the truth about him on this website), has finally caved in to the FTC charges.  This is the full FTC judgement.

This is a  victory of sorts for the millions who have been scammed by him over the last few years.  However, what has actually happened has been a kind of plea bargaining, much favoured in the US. (Here’s his home-town take on it.)

Rotten Bad Smell

Hunstville 0, Willms 1

Instead of being stripped completely of his ill-gotten gains and being chucked in the slammer for a few years, he has reached a settlement whereby no admission of guilt has been made!

This is exactly what I suggested would happen, because the self-proclaimed philanthropist Jesse will do anything, absolutely anything, to stay in business.

To me this isn’t true victory.

The Return of Fu Manchu

He’s not been punished by the law which explains the lingering smell I have, possibly due to his key lawyers having previously worked at the FTC.  Maybe it is the old boy network?  Whatever.

The millions (yes, millions the FTC say) of people scammed may be temporarily amazed at the $359-million judgement, but seeing as how the original complaint was for over $450m they’ll soon realise that he’s got off with $100m!  However it’s worded, Willms has weaselled out of any admission of guilt, which means he’s still in business.

What cunning plans could now be afoot, with $100m to back them up, they’ll wonder?  It’s like The Return of Fu Manchu.

Almost 4 Million Questions

jessewillms.com-2012-02-24-12h-20m-30s

Willms’ Blog Release – notice how he promotes the $25k ‘gift’, but not his $359m settlement?

Like me, the millions scammed by him will be questioning how he isn’t, right now, being butt-plugged in Huntsville, instead of having 7 days to calmly surrender his bank accounts to prove that he can stump up the $359m negotiated, meanwhile making gratuitous comments about better business practices in future whilst still singing the praises of his $1000 philanthropic gestures.

  • True, Willms et al have to hand over all their money and have promised as much under sufferance of perjury.
  • True, they all have to notify the FTC of their whereabouts for the next 20 years and all their business proceeds.  They have to keep compliance records for 5 years.
  • True, Willms must tell the FTC his jobs, phone numbers, businesses in which he’s involved etc
  • True, Willms et al have 180 days to hand over all details of all their businesses and contacts within those businesses.
  • True, Willms for the next five years must give a copy of the FTC order (the pdf attached) to each person he does business with and that they have 30 days to sign and return it to the FTC.

True for all of that, but, Willms can still do business and who knows if any of his victims will get recompensed.  A lot of the order’s wording is to ensure that the US & Canadian Inland Revenue get their taxes from Willms et al for the last three years.  What about the little people?

This article guesses that victims won’t see any of the cash.  My guess is that only those people that actually complained to the FTC will get cash, which is why it’s so important to complain, as I’ve suggested for years.

The Return of Fu Manchu

This article thinks that he’s had to hand over everything (though I can’t see how they justify that, given what we know about business secrecy in Nicosia, Cyprus), yet it also points out that the bans that Willms has had to acquiesce to only apply to the USA!  That is, there’s nothing at all saying Willms can’t set up anywhere else, like Korea say, and hammer the world from there!

MSNBC opinionate that Jesse Willms will need to look for a new line of work…..

I, of course, beg to differ, because:

  • He settled with Microsoft, yet carried on trading as usual.
  • He settled with Symantech, yet carried on trading as usual.
  • He settled with Oprah Winfrey, yet carried on trading as usual.
  • He settled with Dr Oz, yet carried on trading as usual.
  • He settled with Google yet carried on trading as usual.
  • Now he has settled with the FTC. I’d be amazed (yet obviously pleased) if he changed the patterns of a lifetime. Only time will tell.

On top of this, Willms himself states on his blog entry (see screenshot above);

We are working to resolve issues relating to past marketing practices for products that our company no longer sells. Through this process, we have taken steps to assure(sic) that our business practices are in full compliance with the law. We are excited by the opportunity to continue giving customers access to a variety of products and services at significant savings. – n.b.  the emphasis is mine.

…..which looks to me that it’s more web business, not a change in business type.

It’s a victory, but not the one the whole world wants.  It all leaves a bad, lingering, smell…..

 Affected Businesses

Apart from Willms, Sechrist and others, the business entities that we’ve come across in our investigations here, are all in the judgement.  It writes that “Corporate Defendants” means:

  • 1021018 Alberta Ltd, also d..b.a. Just Think Media, Credit Report America, Wulongsource, and Wuyi Source;
  • 1016363 Alberta Ltd also d.b.a. eDirect Software;
  • 1524948 Alberta Ltd, also d.b.a. Terra Marketing Group, Swipe.Bids.com, and SwipeAuctions.com;
  • Circle Media Bids Limited, also d.b.a. SwipeBids.com SwipeAuctions.com, and SellofAuctions.com;
  • Coastwest Holdings Limited;
  • Farend Services Ltd;
  • JDW Media, LLC;
  • Net Soft Media, LLC, also d.b.a. SwipeBids.com;
  • Sphere Media, LLC, also d.b,a SwipeBids.com and SwipeAuctions.com;

I’ve listed these so that they appear in search engines and so that people realise the lengths of obfuscation that Willms has used in his activities.

Office Politics

I say Willms, because he is recognised in the judgement as the prime mover in the scams.  He has been pinched for hundreds of millions – the others have been collared for a few tens of thousands at most each, some, for nothing, because (how embarrassing is that for them?), they have nothing – yes really!

  • How annoying for the two Gravers that their payments are about the same as young Jesse Wilms’ fish tank!  ($30,000 in 2010 he paid for it)
  • I wonder how the Children’s Hospital Boston and the Gulf Coast Restoration Fund both realise that they’ve got less from philanthropic Jesse than he’s spent on his fish tank?  ($25k each)  I wonder how they feel now, knowing that this money was stolen from ordinary consumers, people like themselves?
  • Or how do Canadian veterans feel about Willms plugging his $1k donation to the poppy fund, while spending $5000 on a pool table?

How galling for Sechrist, Callister, and Milne.  They can pay nothing, Willms can pay $359m!  If they’re still working for him I bet that that’s fun in the office!

This is a local copy of the full FTC Judgement Against Wills et al  I suggest everyone read it – it’s riveting.

 

Enhanced by Zemanta

Related Posts:

Foetus Products Shop Made Simple

Foetus Products Shop Open

Foetus Products

Foetus Products

In preparation for our next release, Spookhouse, I’ve set up a proper shop to sell it!  Our intention is to sell everything ourselves via this sole outlet. (Click image for the UK shopping site.)

The announcement is on the Crawling Chaos website here.

Kicking off the shop I’ve reworked (…er…shouldn’t that be ‘am in the process of re-working?…) all tracks from the two previous CD issues.  Finally I’ve had a decent handle of the articles…

Some have been substantially changed which may upset the purists, my current modus operandi being to imagine myself back then using the current software and equipment I now have at my disposal, then to change the existing 2-track recordings to best fit this basic idea.  After all, they’re already in the digital domain – so I may as well try and make them something like how I/we wanted originally, but was thwarted by technology.

In tandem with this, I’ve whipped out some jam and hidden parts in tribute especially to Paul, Jeff & Garry, because this was the core of many creations that appear on those two releases and turned them into something dark and tragic, as that’s how I currently feel about their absence from the planet.

As Steve Jobs once said,

“Remembering that you are going to die is the best way I know to avoid the trap of thinking you have something to lose. You are already naked. There is no reason not to follow your heart.”

Close observers will spot the “new” tracks.  They are there to highlight our jollity, our bleakness, the tiny hidden gems of deftness in improvisational Jeff’s playing and Paul’s lyricism, the randomness of Gazza and the end that must come to us all.

All this stuff is competitively priced compared to the muffled output from the usual on-line stores.

Spookhouse

The Spookhouse design is currently being set.  Downloads from the CD will be available following the CD release.

Other Items

These will be released, mainly as download, for other artists wanting to contribute to to the Foetus Products collective sound resource.  This isn’t a joke.  We really mean it folks!

Technical

I’ve set it up using open-source software on the foetusproducts.co.uk domain.  All links are secure where they need to be using a SSL Certificate I bought from GoDaddy.com, as they were had a special offer going…!  It’s security level is the highest you can get (it uses a 2048 bit key), which means folks should have no qualms about their bank getting raided or whatever if they buy from us.

Users will have a choice of two financial transaction processors – PayPal and Google Checkout for which I’ve set up merchant accounts.  They’re ubiquitous and most people are familiar with their operation nowadays.  I thought about using Amazon, but they don’t currently process for digital items.

The reason that we’ve gone this route harks back to our (i.e. Crawling Chaos’s) independence of spirit – and because our returns will be on par to going the iTunes route, say, for distribution.  We lose about 10% commission in the transaction process compared to a lot more through online download stores.

Related Posts:

Comments are closed

Trading Planet Ltd – running again after legal closedown!

Not Kevin post on February 14th, 2011
Posted in Internet Tags: , , , , , , , , , , , , , , , , , , , ,

A Trading Planet Opinion

A Trading Planet Opinion

From various complaints online it seems that Trading Planet Ltd and other companies may be back in business (under new names).

Also found this very interesting 4 page thread which has investigated these companies and the links between them in some depth.
http://www.dslreports.com/forum/r24610419-Credit-Card-Fraud-Unauthorized-Charge-for-39.71-from-the-UK

On page 4 is a post from 6th January 2011 which says:
“Even though the scam started in July 2010, it is still going strong with a flurry of recent fraudulent charges. Same routine, same shell site, same bank runaround yet it goes on.

Here’s just one discussion with recent complaints:

http://whocallsme.com/Phone-Number.aspx/8883890108/5

I filed a complaint at the fbi.gov site, I know others did too, yet nothing has happened. I wrote John Leyden with the Register about how prevalent this is and hope he chimes in since it involves organized crime using UK addresses.”
http://www.dslreports.com/forum/r24610419-Credit-Card-Fraud-Unauthorized-Charge-for-39.71-from-the-UK~start=60

The recent complaints refer to unauthorised charges from Lafincs Consett (County Durham) – so it seems the County Durham UK Ltd companies are up and running again under new names? eg:
Catchy Cash Ltd. 85 Durham Road Blackhill Consett County Durham DH8 8RR Companies House Registration Number: 7006949

Related Posts:

© 2007-2017 Strangely Perfect All Rights Reserved -- Copyright notice by me