Tag Archive: Bollox

Estonian Spammer Forges CBS and The Guardian

Get Rich Quick Scam Forges Genuine News Agencies Web Pages

Gmail Spam

Gmail Spam

I recently received two emails from a friend’s old Hotmail account, but to two of my email addresses.

Email Spam

Email Spam

Probably, the account has been hacked as I could detect no spoofing in the emails’ headers.  These are the emails, with the email addresses blacked out.

Initial Email Investigations

The text is similar in that they try to entice a user using pretty poor English to click on the shortened URL links, which are active.

Here’s how the links work:
To my Email address;
cbsbusiness9

cbsbusiness9

I had http://cbsbusiness9.com/index2.php?/5260 which then goes to

http://cbsbusiness9.com/uk.html?/partners/the-guardian/small-business/5672-9782-67834/making-money-online/

 

To my GMail address;
cbsnews-article

cbsnews-article

I had http://cbsnews-article.com/index2.php?/4032 which then goes to

http://cbsnews-article.com/uk.html?/partners/the-guardian/small-business/5672-9782-67834/making-money-online/

 

The screenshots show the results using a neat Firefox plugin, Flagfox, which displays the source IP address and country on mouse-over.

The WHOIS’s of each domain are almost identical.  These are screenshots.

whois.domaintools.com screen capture 2012-12-12-17-12-26 whois.domaintools.com screen capture 2012-12-12-17-13-17 That Arthor Brown’s a one, eh?  Notice the Ukrainian, Russian and New York connections?   Who is/are  or what is:

TNew line ave 172 95
NY, 18274
UNITED STATES
+1.7343541732

Google Search on +1.7343541732

Google Search on +1.7343541732

Googling the phone number pulls out a heap of (not)surprises including an awful cesspit of scamminess that’s now starting to rival Pacific Webworks’ Google Treasure Chest and Jesse Willms’ Colon cleansing efforts!  (We saw these scams a few years back – check the links)

Just check out the fake news and dodgy sounding sites in the search results….  These are the first couple of pages of current search results:

  • Com-news8.net
  • Bcnews8.com
  • Dildobigg.com
  • Raspberry-Ketone24.com
  • BigGgEts.com
  • HurtGuys.com
  • GrowsPeniss.com
  • HugerAss.com
  • Com-news9.net
  • Com-nbcnews9.net
  • coloncleanse-extreme.com
  • nbc9news.com
  • nbc1news.com

Arthor Brown is in most of them with his Yahoo! email address as [email protected]   Please don’t confuse him with this Arthur Brown, but yes, handle all of these websites like Fire!

Forged Webpages of The Guardian Newspaper

cbsnews-article.com screen capture 2012-12-12-16-3-51

cbsnews-article.com screen capture 2012-12-12-16-3-51

cbsbusiness9.com screen capture 2012-12-12-16-3-23

cbsbusiness9.com screen capture 2012-12-12-16-3-23

The Guardian, is an old and respected news organisation in the UK.  CBS is a long-established US media network.

They, and the purported author of both webpages, Sirena Bergman, must be pretty pissed off about the hijacking of their names.

Also to be annoyed, is Lloyds TSB Bank who apparently are “in association” with this get rich quick scheme for work at home moms!

Completely Forged News Articles!

Indeed they are.

  • The articles are dated “December, 11:41”, which is odd since there’s no day, just month and time!
  • Both articles are embedded in genuine Guardian web-pages, with all the links surrounding the article going to genuine Guardian web-pages or genuine advertiser websites!
  • The hook links in both forged webpages go to http://workinghome22.com/go.php

The forgery is done in the same manner as the well-known phishing scams done for banks and on-line finance and insurance.

Apart from the images sourced from The Guardian, the scammer’s images are sourced from:

  • ddmcdn.com which is HowStuffWorks.com!
  • localconsumeralerts.com
  • prosperadtracker.com
  • ophan.co.uk

So, Who Is workinghome22.com

Bad Gateway

Bad Gateway

The first link was dead, opening a bad gateway so the expected redirect didn’t work.  The tracking pointed back to Ireland!

Bad Gateway

Bad Gateway

The second link worked, but the sweetly named workingfromhome22.com wasn’t the destination.   No, the link immediate re-directed to http://onlineincnow.com/2/?aff_sub=72

Well, at least the affiliate number 72 is getting paid….

But hang on, who exactly is workingfromhome22.com?
workinghome22.com screen capture 2012-12-12-16-31-44

workinghome22.com screen capture 2012-12-12-16-31-44

Well, typing the URL directly takes me to workingfromhome22.com!  This is it!

Cunningly, you’ll note that it’s pulled out my home-town as Bournemouth (where I live) with that awful “mom” Americanism!  No-one in the UK addresses their mother as mom…  I mean, FFS?

The webpage links, containing the disreputably used graphics of Thomson, Reuters, CNBC and NBC Universal all point to http://workinghome22.com/go.php, which is of course in this domain.  So let’s click it, shall we?

Well, pctrck.com is trying to load, but not much else.

Reversing then trying to exit workinghome22.com produces a pop-up of dubious functionality!  Check the words – there’s no cancel button!

workinghoome22_Popup

workinghoome22_Popup

I did however manage to successfully close this page following that.  Whew!

Now Back to onlineincnow.com

OnlineIncNow Location

OnlineIncNow Location

The previously mentioned http://onlineincnow.com/2/?aff_sub=72 is located in the USA.

So What Is It Up To?

OnlineIncNow.com Whois Record

OnlineIncNow.com Whois Record

Good Question!   A WHOIS puts the registrant in China with the DNS servers in Russia!

As I mentioned earlier, the similarity of the scamminess of this thing is just like the Google Treasure Chest/ Google Money Tree / PWW scams of old.

The site is plastered with the logos of well known businesses to ad an air of authenticity to things (just as the original hook sites used The Guardian Newspaper and CBS in the same way) yet at the bottom of the page they disingenuously ad:

This site and the products and services offered on this site are not associated, affiliated, endorsed, or sponsored by NBCNEWS, ABC, USA Today, CNN or Fox News, nor have they been reviewed tested or certified by NBCNEWS, ABC, USA Today, CNN or Fox News.

onlineincnow.com T&C Screenshot

onlineincnow.com T&C Screenshot

Despite all this, it is of course bollox set to deceive.  In fact, it now appears that it’s the well known negative option scam, used by Pacific Webworks (PWW) and Jesse Willms to good effect until they were found out.

Let’s see how this pans out, shall we?…..

Check out the T&C page from the tiny link in the page footer – screenshot on the right.

  • They say that the applicable law is the State of Florida.
  • You will become a “member” and the key phrases are here:

You must register as a “Member” with Online Income Now to access certain functions of the website. You must provide current, complete and accurate information about yourself (the “Registration Data”) when registering as a Member. You agree that such information is truthful and complete. You agree to maintain and keep your Registration Data current and to update your Registration Data as soon as it changes. You are responsible for maintaining the security of your password. Online Income Now is not liable for any loss that you suffer through the use of your password by others. You agree to notify Online Income Now immediately of any unauthorized use of your account or other breach of security known to you. You also, by becoming a Member, agree to report violations of these Terms and Conditions by others to Online Income Now.

For a limited time only, the cost of this product is $97.00 ( usual price $299.95 ) and every 32 days thereafter you will be billed the member’s only price of $9.95 for the monthly use.

MATERIALS PROVIDED TO Online Income Now OR POSTED AT ANY Online Income Now’s WEB SITE

Online Income Now does not claim ownership of the materials you provide to Online Income Now (including feedback and suggestions) or post, upload, input or submit to any Online Income Now Web Site or its associated services (collectively “Submissions”). However, by posting, uploading, inputting, providing or submitting your Submission you are granting Online Income Now, its affiliated companies and necessary sublicensees, permission to use your Submission in connection with the operation of their Internet businesses including, without limitation, the rights to: copy, distribute, transmit, publicly display, publicly perform, reproduce, edit, translate and reformat your Submission; and to publish your name in connection with your Submission.

You’ll see that “Online Income Now” will:

  • make you a “member” (of what?)
  • and you will be regularly billed, (why?)
  • and that for anything you post, upload etc (wah?  whadya mean?  Where is this uploading?),  “Online Income Now” will take no responsibility for what you do!

…………….which is curious as you don’t know what you’ll be doing and they have invited you to do it in the first place!!!

Now Lets Click The Link!  Follow that Opportunity!

onlineincnow.com screen capture 2012-12-12-17-46-50

2 Spots Left!

Amazingly (sarcasm alert) there are two “spots” left in my area!  This is the page… http://onlineincnow.com/2/index2.php

Michelle Johnson is the “guru” who will tell me everything!  So what do I do?  I have two options:

  • Back out
  • Sign up

Let’s Try Backing Out, Shall We?

CannotBackoutFromOnlineIncNow2

Cannot Backout From OnlineIncNow 2

CannotBackoutFromOnlineIncNow

Cannot Backout From OnlineIncNow

Well of course, they won’t let me.  It takes two goes to get out and the first one completely takes over the browser!  Bad.  This is B.A.D.

Ah, well.  Finally escaped.

Let’s Try Clicking to the Signup Page, Shall We?

secure.onlineincnow.com Data Entry Screen

secure.onlineincnow.com Data Entry Screen

I decide on my name, “Jobless Jake” and a random phone number…. The website is now https://secure.onlineincnow.com/2/cc_97.php

What I see is bad, really bad, and any attempt by this pack of jokers at saying they don’t run a negative option scam is now revealed on this sign-up page!

The scam is now revealed for what it is – a negative option scam!        Read it carefully…..  They expressly say;

By enrolling, you will be charged a one-time fee of $97.00

In teeny-tiny letters, note!

But remember, right back buried in the T&C’s they say;

every 32 days thereafter you will be billed the member’s only price of $9.95 for the monthly use.

This is expressly against the FTC code and laws in most countries.  If any extra charges are to be levied for any service or goods, they should be expressly stated on the sign-up page where the customer first enters their financial details.

Gotcha! You Bastards!

Okay, I’ve Had Enough of This. I’m Off!

“Not so fast, young Jobless Jake”, say onlineincnow.com……!

CannotBackoutFromOnlineIncNow3

Cannot Backout From OnlineIncNow 3

They’ve an extra 20% off plus and extra bit of webpage-erese!  The screenshot says it all, though it wasn’t the end of it.  I had one more “Leave Page” option like the earlier one above.

Conclusion

Negative Options are banned by law in most countries.  If you get collared by one, you’ll have a job stopping the bastards taking money from your account for ages.  The only sure way to stop this once you’ve been sucked in is through….

  • Chargebacks.   Get your bank or card company to get a charge-back saying the terms of trade or purchase were hidden (as seen in my screenshot above).

So………………….

  • It’s a scam.
  • Stay away from it.


Enhanced by Zemanta

Related Posts:

Dangerous EffectiveCleanse – and Scams Too!

PreScript Advice

If you think you’ve had your bank ‘cleaned out’ by any of a multitude of ‘life cleanse’ or ‘colon cleanse’ type internet scams, there is only one real remedy
Ask for a charge-back against the company through you credit card company. Your reason, when asked, is that the company has either:

  1. Not adhered to their own claimed ‘Terms and Conditions’ or
  2. The company cannot be contacted through their advertised channels

If the company fails on any of these two key points they have no excuse not to refund you. In fact, if they deliberately make contact difficult, it’s criminal.

Introduction

Dangerous Scammer Investigation

danger-sign-crossIt all started with a ping to my website from the Drupal Forums (see http://drupal.org/node/608514).

It turns out that the webmaster was using a piss-poor Californian host called byet.org.  This host detected when an Amazon advert was going through and redirected it to the viper’s den called MyBookFace.net, taking a nice skim on the profits in the process (see my articles on the crippling con website here http://strangelyperfect.tv/5552/mybookface-crap/ and here http://strangelyperfect.tv/5612/mybookface-google-utah-and-nevis-scamboys-united/)

MyBookFace.Net Again

The redirect was still working on the user’s website (devoted to head and neck cancer, http://www.squamoussupport.info/).  The key bit is to click on the head and then the Amazon Store link in the bottom right.  Sure enough (today), you get taken to MyBookFace.net!!!

It’s like the return of a boil on the bum for me. Now, depending on how you access this shit-hole, you’ll see various things.

The first page is sometimes loaded with “White Teeth” ads, from you know who(see here and here for instance), which are accessed via a false newspaper ad containing the key(yukky)word “mom”.  Sometimes it’s Mary Steadman — again!

I’ve had two popups, several hours apart during my checks, that both claimed I was the lucky 1,000,00th visitor to the site and thus deserved a prize!  This popup by-passes the pop-up blocker in IE8.  Give it a go – you too can be the 1,000,000th visitor!!!

If you allow further pop-ups, the fun really starts!

More Fun With MyBookFace.Net Popups!

Danger GeneralDuring one session, using the ‘Private Browsing’ feature in Firefox, I got the Mary Steadman fake newspaper ad again – wahay!.  In this were two adverts; for Acai and Colon Cleansing.

They both originated from the same place and had similar designs.  The Acai one (at acaiberryexclusive.com) I left, because the Colon one has some VERY, VERY DANGEROUS CLAIMS in it.  (The Acai ones were very similar, actually, but I’m trying to keep this post short-ish)

EffectiveCleanse.com

EffectiveCleanse.com loads with the strap line “Life Cleanse”.  It’s contact address is in County Durham in the UK again! (just like all the UTAH scams).  This time the address is:

LB LFP Internet Ltd.,

101 Deneside,

Lanchester,

Co Durham,

DH7 0LZ,

UK

A small hunt for this address produced several companies, all apparently squashed into someone’s living room only a mile or so from the UTAH scammers elsewhere in Co Durham!  There are many unhappy folk about who’ve had dealings with companies at that address.  Similarly for the company name itself...

EffectiveCleanse Claims

Effective Cleanse Antioxidant. Get Your Risk-Free Order Trial Now

Effective Cleanse Antioxidant. Get Your Risk-Free Order Trial Now

Everything is visible on the full-screen dump in the image here by clicking on it.  Their claims would be laughable if they weren’t so dangerous. (In many respects, the claims are very similar to those of Monavie, currently being investigated by Vogel, Cyberxion, Food Tech of California and others on this entertaining post by LazyMan about the scurrilous Monavie here: http://www.lazymanandmoney.com/monavie-scam-was-my-wife-recruited-sell-snake-oil/#comments)

  • Possible the most dangerous claim that this company makes is that it will “Repair Digestive Tract”!!!    This is seriously bad stuff.  There are only two ways to repair your gut and that’s either surgery or a massive dietary change, usually by stopping all alcohol intake, reducing fat consumption etc.  Some of the ingredients can relieve IBS and constipation by their topical application and ingestion from their fungicidal, antiseptic or mucilaginous  properties .  But this is not the same as “repairing the digestive tract” by any judgement.  Indeed some ingredients will make intestinal damage worse!
  • It also claims to break down DEADLY TOXINS!! Again this is a wholly unsubstantiated and untrue claim worthy of a prison sentence.  Let’s consider a few deadly toxins – cyanide & botulism, say.  Do you really think these few internet pills will stop death from cyanide?  Do you think that taking these pills would have saved the Jews in the cyanide gas chambers?  Of course not.  If they’d said “slightly bad toxins” that would have been more accurate.  But deadly?  That’s something else.
  • Helps prevent intestinal pathologies….  WTF! This one is good….  Pathology is the study and diagnosis of disease!  So they are claiming that this product will stop you from studying …er…various intestinal problems?  I repeat – WTF? !!!
  • The word “FLUSH” appears a lot – “flush out excess weight”, ” flush harmful toxins”.  Should it read “make you go to the bog a lot”, because it will.  Some of it’s ingredients also induce abortion and breast milk-flow but no warnings are given about this (shades of Thalidomide here).  Some have been found to cause cancer.  Some either bung you up or give you the trots dependant on the quantity taken!  It’s a bit of a fine balance between flush and bung.  I don’t think I’ll be using my guts as a testing ground!

Perhaps the funniest claim is that it will “Increase Focus and Energy”….   It’s a pity the author didn’t try and focus a bit harder.  Because further down the page is the mind-numbing misspelt paragraph which reads (I kid ye not):

According to National Geographic – “Human waste is a sinisteer(sic) world of monstrous creatures that feed on living flesh- Parasites” (sic) Parasites feed on Humans ams(sic) your body may house more than you know. The US alone contains widespread parasites accross(sic) the nation.

My spell-checker has gone berserk on that.  I can’t believe that National Geographic actually printed that!

And anyway, human waste in a healthy person is certainly not pathogenic.  The bacteria in one’s gut DO NOT “feed on living flesh” as they claim.  They are an essential part of living and without them, we’d all die.  If they mean worms etc, then again, they do not feed on your flesh – they feed on your gut contents!  They live on shit!

Terms Disagree with Claims

Effective Cleanse Antioxidant. Terms & Conditions

Effective Cleanse Antioxidant. Terms & Conditions

Well it had to be somewhere, didn’t it?  Despite all the criminally outrageous claims on their front page, their T&C actually states:

Our Products have not been evaluated by the FDA or EU Health Authorities, and Our Products are not intended to diagnose, treat, cure or prevent any disease.

Fortunately, they have a UK contact number of  0044 20305 10825, which makes it a London number.  Why not give them a call and see which bit is correct – does it cure, or doesn’t it?

You’ll also see here, in small print, only once, that you’ll be charged £69 per month for 30 days supply.  Except it’s written thus:  “At the end of your 15 day trial period you will be charged GBP 69.”

Of course, upon reading the consumer complaints listed at the bottom here, you’ll find that many people can’t get through on the phone.  In that case, the information on their FAQ page to the question:

I did not place this order and do not recognize the charge on the credit card statement. I think it is fraud.

…should be taken with a large grain of salt.  The answer they give is that making a false claim of fraud is a criminal offence.  Er..no.  It isn’t.  All you are doing is to resolve a dispute over charges to your credit card that you consider erroneous.  It’s not a criminal offence to dispute the bill!!!! This is what they say to frighten you, and it’s only to frighten you:

We take Credit Card fraud very seriously and considerate it a crime. Our Risk/Fraud Department will verify that the transaction is indeed fraud and was not ordered by you. In such case we kindly ask you to contact us and our Customer Service Team will be happy to assist you. Please prepare the following information before calling or writing to us: name on your credit card, descriptor(s) on the charges, amounts, and date(s) of the charges, your billing and shipping address.

We would like to inform you that making a false claim is a criminal offense and you will be prosecuted if such claim is made. All information that you provide us, along with all related log files and IP addresses will be forwarded to the local police department and district attorney. In addition the governmental cybercrime agency will use this data to investigate and establish the physical location and computer from which the account was created.

If you can’t contact them through the phone, as many have found to their cost, the above information is doubly bogus.

On the other hand, the claims they make for the product on their main landing page, really are criminal.  There is no way in hell that GSK et al would dare say anything like this.

Conclusion

Anyone who has read mine and other’s Google Treasure Chest, Acai, Government Grant and  Teeth-Whitening investigations will suspect that there’s more to this business than County Durham alone.  They hide their domain WHOIS for a start.

Because of their secretive nature, their misleading and dangerous claims which are in plain contradiction of their T&Cs, and the ‘unreliability’ (and that’s being generous) of their customer service as evidenced by the many complaints, this bunch of clowns are much worse than a comedy act.  Scammer or crook?  I couldn’t possibly say, but fetch me a bargepole to poke them away.  Tommy Cooper would say “Scam-Crook; Crook-Scam.  Scam-Crook; Crook-Scam.  Scam-Crook; Crook-Scam.”

I’ll finish now, using words taken directly from their webpage by saying :

The US alone contains widespread parasites accross(sic) the nation.

(Mostly in Utah, from my experience, but not exclusively in the US.)

Extra Links(Just a few of the many complaints about this lot):

Imprint of www.acaiberryexclusive.com
LB Cassiopeia Media Limited LB Cassiopeia Media Limited
118 Fines Park
Annfield Plain
Stanley
Co Durham
DH9 8QZ
Tel: United Kingdom +38 616 004 917
Imprint of www.effectivecleanse.com
LB Eridanus Entertainment Limited
57 Langden Close
Templetown
Consett
Co Durham DH8 7NG
Tel: United Kingdom +39 064 523 0442

Postscript (30/10/2009)

As with the Google Treasure Chest/Money Tree (Kit) bollox, because I’ve posted about the colon parasite scammers, this website is now attracting Google adverts from those very scammers.  I use advertising to help fund the costs, my payments in a round-a-bout way coming from the scammers!  I couldn’t possibly comment any further except  to point you to my privacy policy page.

Related Posts:

MyBookface, Google, Utah and Nevis Scamboys United

Introduction

I knew there was something really, really dodgy about that MyBookFace.net crap highlighted in this post the other day. Not only are they connected to some serious malware (as detailed in the posting), but they’ve an interesting line in popups!!!

Google Treasure Chest Rises Yet Again!

Here’s what to do…

Blogs » MyBookFace (Powered by phpFoX)

Blogs » MyBookFace

  1. Go to http://mybookface.net making sure that you’ve emptied your browser cache and removed cookies (you will find that the popup only appears once, if you close it down. So if you need to see it again, clear your cache & cookies)
  2. Now click on the “Blogs” link which is
    • You’ll now be presented with a popup window for San Francisco DAILY NEWS. This is located at http://www.net-news-daily.com and is yet another pseudo-news website that appears to be full of interesting links!
  3. Link Information for: www.net-news-daily.com

    Link Information for: www.net-news-daily.com

    Actually, all of the links go to only a couple of destinations….. If you use the “Web Developer” plugin for Firefox, you can quickly see all the links in a web document – and in this case, there aren’t many!

    • You’ll also see that the T&C type links at the page bottom don’t work!! (these are the javascript void links)
  4. Let’s follow the link… Where do you think it ends up?

Google Fortune – GoogleWorksToday.com

Unbelievable, isn’t it?..!!

Google Fortune - Earn Money Using Google!

Google Fortune - Earn Money Using Google!

As seen and trusted on ABC, CNBC, CNN it says!! – well that’s one way of putting it!

In essence, it’s the same old trip we’ve had from Google Treasure Chest, Google Revolution, Google Money Tree. So from now on, anything like this is lumped into one ‘thing’ called Google Bollox.

The page is actually quite inviting and not quite as gaudy as before. Apparently, you can earn up to $907 per day (damn – I was hoping for $935 again.)

The same poor logic and content checking is going on though – at the bottom they helpfully inform the reader that their product isn’t endorsed by Fox News even though this is the first actual mention of Murdoch’s child.

Also at the bottom, there’s another new company (for me) called FunWebProfits View Marketing, Inc., 642 Main Street, Nevis. Nevis is that island in the Caribbean again!

Who Are They?

This seems a relatively recent addition. A Google search on the full name and address produces nothing. However, separating the name and address into two different searches produces the now-usual crop of complaints and allegations of fraud and theft that we’ve become accustomed to.

Try FunWebProfits View Marketing, Inc., 642 Main Street, Nevis.

The Nevis address has been in these pages several times. See:

Using this earlier research, and the website: http://www.sknvibes.com/Business/Trust.cfm?Vz=1, we can say that the Nevis company is:

Nevis International Trust Co. Ltd.
Mr. Eugene Herbert
P.O. Box 642
Hamilton Development
Nevis
Tel: 1 (869) 469-5132
Fax: 1 (869) 469-5898
E-mail: [email protected]
Website: http://www.inttrust.com

The header at the top of the inttrust about page says it all. It’s a dinky little island so has to make money somehow…

Nevis is an excellent jurisdiction in which to open a Limited Liability Company (LLC). The Nevis Limited Liability Company Ordinance was passed in 1995 and has become very popular.

It offers a full range of financial services and products including asset management and protection, company formation and administration, insurance, foundations, mutual funds administration, offshore banking, investment management, and trust services.

Nevis offshore companies are free from taxation and are protected in privacy by the 1985 Confidential Relationship Act.

The blurb on their website offers strict confidentiality along with business expertise from the United States and Britain!

Another interesting bit is that the copyright for this crap is claimed by a company called “View Marketing”. This makes a Google Search on them very hard, presumably by design! The inconsistent punctuation is designed to mislead, is it not? I take it they’re nothing to do with the Scottish Tourism company of the same name… etc etc etc.

Time to Sign Up! I’m In!

Google Fortune - Earn Money Using Google: Credit Card Entry Page

Google Fortune - Earn Money Using Google: Credit Card Entry Page

Because the GoogleWorksToday.com page is a “Limited Time Offer”, I thought I’d better leap in now before it’s too late…

I used my standard spam magnet email address but with a name of “Donna Kebab”(I’ll be waiting for some spam on this name, natch). I used the postcode of Scotland Yard in London and their general enquiries telephone number…. Mysteriously, I notice that they have a “mark of the devil” contact number of 877-402-2666….. Hmmm. Let’s check that out using Google, seeing as how I’m starting a new career with it today!!

Oh Dear! Best not.

This phone number already appears to have ‘prior’, as the boys in blue would say… Apart from the few scam sites like realjobsfast.com say, all the hits are complaints! Like:

Needless to say, like your typical “News of the World” reporter, I’ve made an excuse and left! However, this was not before noticing that the credit card page of GoogleWorksToday.com at

..has a WHOIS of:

Registrant: View Marketing
2862 Gulf to Bay Blvd
Building A
Clearwater, Florida 33759
United States

Domain Name: GOOGLEWORKSTODAY.COM
Created on: 22-Jul-09
Expires on: 22-Jul-10
Last Updated on: 22-Jul-09
Administrative Contact:
Marketing, View
2862 Gulf to Bay Blvd
Building A
Clearwater, Florida 33759
United States
+1.8774022666

This Florida place is in these little shack businesses, very nice.

However, spin round 180 degrees and we can find one possible source for the ‘company’ name… The large building is called “View Gardens”, ha ha!

Paths Running Deep and Murky

One of the scam site results in the Google search for the 877-402-2666 number was another pseudo news site (these must be effective because of their prevalence):

New York Reporter News at http://web.archive.org/web/20090802103410/http://news9at6.com:80/index14.php?

Jobs - Employment - New York Local News: Scam site

Jobs - Employment - New York Local News: Scam site

This scam site even has very convincing YouTube news-type videos, all targeted at the work-at-home-mom thing. As before, apart from the inbound feeds that add authenticity, there are hardly any links.

Most links point to this sucker-inner website:

http://web.archive.org/web/20090809071637/http://news9at6.com:80/google14.php?arid=

which redirects to:

Google Fortune - Earn Money Using Google! This time at https://www.processcartcenter.com

Google Fortune - Earn Money Using Google! This time at https://www. processcart center.com

…that will have an aura of familiarity for readers of my Google Treasure Chest – it’s a scam and a half! posting from April (yes, it’s processcartcenter.com again) and also, it’s exactly the same Google Fortune page as before, but with a different address…..

Whois, Who Are They?

All is not lost. Check out the IP addresses in the WHOIS’s for processcartcenter.com and googleworkstoday.com which are:

  • 209.90.119.16
  • 209.90.119.11

These are obviously related. Now if you suspect that they live in Utah, I’m not betting any money with you. The WHOIS for both these IP addresses is:

Fibernet Corporation: 1155 S 800 E, Orem, Utah 84097

Talk about keeping it in the family!

The Tabernacle-like building houses 3 companies:

Of the three, Fiber.net (sic) has definitely been involved in spamming from 1997 through to at least 2007. Nethosting.com seems to be a standard webhosting entity with the usual good and bad references.

Ceristar seems a bit odd, to say the least! Their previously posted domain name ceristar.com is up for sale and since 2000 they have had a host of double stock swapping company mergers and takeovers. Their stock exchange reference (OTC BB: CTRI) now seems to point to a Chinese Organic Food business, which wholly at odds with previous references to the company setting up ISP-related connections to all and sundry in Utah.

Conclusion

Scam, scam and thrice scam.

The only thing missing from this ferago of twisted and hidden businesses is some references to County Durham, Gibraltar, Pasig City or Nicosia, Cyprus.

No doubt they’ll pop up soon (pun intended)

Naturally, DO NOT SIGN UP FOR ANY OF THESE “OPPORTUNITIES”!!!
Follow the Guidance given in Google Treasure Chest – it’s a scam and a half!, Google Revolution, Different Name, Same Scam!, More on Google Profits and Pacific Webworks, Robert G Allen, Grants, and a Credit Card Slimeball
Between these articles I’ve now produced clear links between the various scam operations, their money stashed overseas and their business entity partners and covers in the USA and elsewhere.
DO NOT SIGN UP FOR ANYTHING – FINAL WARNING

Related Posts:

Goodbye Bollochio?

Bollochio: an Introduction

PinocchioIn an effort to test the spam un-subscription services of the spammers, I’ve decided to try and remove Bollochio, my nom-de-spam for some of the Utah-based scam-meisters, as detailed here, google-revolution-different-name-same-scam , for instance.

Dr. Joseph Stein and Dog

Dr. Joseph Stein and Dog

The first occurence of Bollochio that I chose to report on is here: http://…google-revolution-…comment-1779 which was the webreviewagency.com bollox of Dr. Joseph Stein and his dog….

Bollochio is obviously my one-second invention (I don’t spend too much time on psuedonyms) to describe scammers like Pacific Webworks, where for every utterance of complete bollox from their conning machine, their noses in consequence grow…  It is in no way a reference to anyone with that name (I’ve since found that there are a few people with the name!  See here for instance.)

Unsubscribe

emailix.net removing billkiller

emailix.net removing billkiller

The spam came from emailix.net and on clicking the un-subscribe link, you get the screenshot here.  It really did appear to un-subscribe Bollochio after 10 mins!

Only time will tell I suppose, the effectiveness of emailix’s claims.  They are a New York based firm, see whois.

Related Posts:

Comments are closed

More on Google Profits and Pacific Webworks

What a tangled web we weave...

Oh What a tangled web we weave…

Oh What a tangled web we weave…

Back on May 1st I checked out this particular morph of the Google Money Bollox Kit Chest Scheme Plan…  See here.  I just had to show it because of the naff spelling and wordage, plus the inconsistencies in the text and graphics, and company name changes.

Normal

Of course, I’ve now realised that this is all totally normal and is done on purpose to keep Propellor heads busy..  At the time, the penultimate link in the chain of signing up, was:

Propellor Head

So I thought I’d check if it still worked, it being a “secure” connection with session ID, and myself having been through several incarnations of Firefox as well as frequent cache and cookie clearances….

Copyright © 2009 Google Profits™

Well I was still laughing at the dinky trademark sign when I fired up (in)s3curehost dot com.  They obviously consider it something worth protecting!

Work from home with google

Work from home with google

You’ll not be surprised to know that s3curehost.com still exists (so much for security and session IDs?).  I’m actually surprised, in a small way, that they still keep pumping this stuff out. A Whois shows that  s3curehost.com is “IntelliPay, Inc.” a.k.a. “Pacific WebWorks, Inc.” who we’ve already looked at in Salt Lake City on the original Google Treasure Chest – It’s a Scam and a Half posting.

The “Google Profits” web-page has changed slightly, but the incompetent spelling and characteristic inconsistency is reassuringly still there!

It’s to good…  Earn $978 a day… Google Profits – eAuction, which one is it?

I left my “qualifying” to another day, so I haven’t found out if I’m ‘eligable’ yet.

Pacific Web Works

Pacific WebWorks, Inc.

Pacific WebWorks, Inc.

There are two things of note about this business, apart from the “Microsoft Certified Partner” logo. [added 26/10/2009: Matt at scamtimes.com has checked out the claim to be valid here in this comment below. However, it seems very easy to get this ‘logo’ certification.]

  1. The phone number at the contact page here: http://web.archive.org/web/20100507231016/http://www.pacificwebworks.com:80/contact_pweb.htm, which is:
    230 West 400 South 1st Floor
    Salt Lake City, UT 84101

    phone: 801-578-9020
    fax: 801-578-9019
  2. It’s business is an integrated solution for other internet based businesses – my description(SP).

At first glance it’s a normal business for this line of work.  Here’s what they say about themselves and their custom  software suite:

  • They have “assembled a staff of professional trainers, coaches and support specialists”
  • They have “built a state-of-the-art data center” which takes “care of everything, including hosting, manpower, and technical details”
  • They provide “Tools for creating, managing and maintaining a web site”.
  • They provide “Electronic business tools, including storefront hosting, shopping cart and Internet payment systems.”.
  • They provide “Internet Marketing tools, including automated customer database, survey, and e-mail marketing tools.”.
The Plot Thickens

The Plot Thickens

So far so good.  And the database – that must be where all the contacts are kept, securely, private?

Now check that telephone number again.  It was the 9020 that did it! Like primeval intelligence, it’s come back from the depths of my mind.

It’s listed as the main contact point for Google Treasure Chest, etc, many times.  See here and here for two of my posts.  Now check this google search for the phone number 801-578-9020.

There are 1780 results, nearly all are complaints about being ripped-off or scammed.

Another word for rip-off or scam is the legal term, theft.

Conclusion

Chain link

Like links in a chain

Pacific Webworks are still in business – in fact, business is booming and they are reported to be in the top 40 Utah companies!  (http://www.earthtimes.org/articles/show/pacific-webworks-receives-recognition,890942.shtml).  I’m not sure who this lot are doing the reporting, but I can guess the connections…(added 3/3/10: Link to Earth Times removed.  This ‘business’ contains several puffs for PWW.  Like most dodgy websites, it’s domain WHOIS is hidden, by Domains by Proxy, again! – SP)

What a tangled web we weave...

What a tangled web we weave…

This industrial resource, http://resources.bnet.com/topic/pacific+webworks+inc..html, shows that the company had sales >$9m last year for its 34 employees. This is very interesting!  The same source shows, on this page, that profits are doubling at the company this year.

This is good news for all the people ripped off by Eborn et al.

Because the company, having exactly the same phone number as the main protagonists in the Google Treasure Chest scams, now cannot fail to be connected by the FTC in their investigations and imminent court cases.

And from what I recall from the closure of the call centre, is that 200 employees lost their jobs.  This is the same call centre that had 801-578-9020 as the contact number!  It was people working at the call centre who said that 200 people worked there(see http://www.topix.net/forum/source/fox13now/T28A5BU37IS57DC8C/p3).

 

Weakest Link

So there isn’t just a partial business relationship between Pacific Webworks and one or more plaintiffs mentioned in the FTC charges, they are intimately connected.

Related Posts:

© 2007-2017 Strangely Perfect All Rights Reserved -- Copyright notice by me