Tag Archive: Genuine

Estonian Spammer Forges CBS and The Guardian

Get Rich Quick Scam Forges Genuine News Agencies Web Pages

Gmail Spam

Gmail Spam

I recently received two emails from a friend’s old Hotmail account, but to two of my email addresses.

Email Spam

Email Spam

Probably, the account has been hacked as I could detect no spoofing in the emails’ headers.  These are the emails, with the email addresses blacked out.

Initial Email Investigations

The text is similar in that they try to entice a user using pretty poor English to click on the shortened URL links, which are active.

Here’s how the links work:
To my Email address;
cbsbusiness9

cbsbusiness9

I had http://cbsbusiness9.com/index2.php?/5260 which then goes to

http://cbsbusiness9.com/uk.html?/partners/the-guardian/small-business/5672-9782-67834/making-money-online/

 

To my GMail address;
cbsnews-article

cbsnews-article

I had http://cbsnews-article.com/index2.php?/4032 which then goes to

http://cbsnews-article.com/uk.html?/partners/the-guardian/small-business/5672-9782-67834/making-money-online/

 

The screenshots show the results using a neat Firefox plugin, Flagfox, which displays the source IP address and country on mouse-over.

The WHOIS’s of each domain are almost identical.  These are screenshots.

whois.domaintools.com screen capture 2012-12-12-17-12-26 whois.domaintools.com screen capture 2012-12-12-17-13-17 That Arthor Brown’s a one, eh?  Notice the Ukrainian, Russian and New York connections?   Who is/are  or what is:

TNew line ave 172 95
NY, 18274
UNITED STATES
+1.7343541732

Google Search on +1.7343541732

Google Search on +1.7343541732

Googling the phone number pulls out a heap of (not)surprises including an awful cesspit of scamminess that’s now starting to rival Pacific Webworks’ Google Treasure Chest and Jesse Willms’ Colon cleansing efforts!  (We saw these scams a few years back – check the links)

Just check out the fake news and dodgy sounding sites in the search results….  These are the first couple of pages of current search results:

  • Com-news8.net
  • Bcnews8.com
  • Dildobigg.com
  • Raspberry-Ketone24.com
  • BigGgEts.com
  • HurtGuys.com
  • GrowsPeniss.com
  • HugerAss.com
  • Com-news9.net
  • Com-nbcnews9.net
  • coloncleanse-extreme.com
  • nbc9news.com
  • nbc1news.com

Arthor Brown is in most of them with his Yahoo! email address as [email protected]   Please don’t confuse him with this Arthur Brown, but yes, handle all of these websites like Fire!

Forged Webpages of The Guardian Newspaper

cbsnews-article.com screen capture 2012-12-12-16-3-51

cbsnews-article.com screen capture 2012-12-12-16-3-51

cbsbusiness9.com screen capture 2012-12-12-16-3-23

cbsbusiness9.com screen capture 2012-12-12-16-3-23

The Guardian, is an old and respected news organisation in the UK.  CBS is a long-established US media network.

They, and the purported author of both webpages, Sirena Bergman, must be pretty pissed off about the hijacking of their names.

Also to be annoyed, is Lloyds TSB Bank who apparently are “in association” with this get rich quick scheme for work at home moms!

Completely Forged News Articles!

Indeed they are.

  • The articles are dated “December, 11:41”, which is odd since there’s no day, just month and time!
  • Both articles are embedded in genuine Guardian web-pages, with all the links surrounding the article going to genuine Guardian web-pages or genuine advertiser websites!
  • The hook links in both forged webpages go to http://workinghome22.com/go.php

The forgery is done in the same manner as the well-known phishing scams done for banks and on-line finance and insurance.

Apart from the images sourced from The Guardian, the scammer’s images are sourced from:

  • ddmcdn.com which is HowStuffWorks.com!
  • localconsumeralerts.com
  • prosperadtracker.com
  • ophan.co.uk

So, Who Is workinghome22.com

Bad Gateway

Bad Gateway

The first link was dead, opening a bad gateway so the expected redirect didn’t work.  The tracking pointed back to Ireland!

Bad Gateway

Bad Gateway

The second link worked, but the sweetly named workingfromhome22.com wasn’t the destination.   No, the link immediate re-directed to http://onlineincnow.com/2/?aff_sub=72

Well, at least the affiliate number 72 is getting paid….

But hang on, who exactly is workingfromhome22.com?
workinghome22.com screen capture 2012-12-12-16-31-44

workinghome22.com screen capture 2012-12-12-16-31-44

Well, typing the URL directly takes me to workingfromhome22.com!  This is it!

Cunningly, you’ll note that it’s pulled out my home-town as Bournemouth (where I live) with that awful “mom” Americanism!  No-one in the UK addresses their mother as mom…  I mean, FFS?

The webpage links, containing the disreputably used graphics of Thomson, Reuters, CNBC and NBC Universal all point to http://workinghome22.com/go.php, which is of course in this domain.  So let’s click it, shall we?

Well, pctrck.com is trying to load, but not much else.

Reversing then trying to exit workinghome22.com produces a pop-up of dubious functionality!  Check the words – there’s no cancel button!

workinghoome22_Popup

workinghoome22_Popup

I did however manage to successfully close this page following that.  Whew!

Now Back to onlineincnow.com

OnlineIncNow Location

OnlineIncNow Location

The previously mentioned http://onlineincnow.com/2/?aff_sub=72 is located in the USA.

So What Is It Up To?

OnlineIncNow.com Whois Record

OnlineIncNow.com Whois Record

Good Question!   A WHOIS puts the registrant in China with the DNS servers in Russia!

As I mentioned earlier, the similarity of the scamminess of this thing is just like the Google Treasure Chest/ Google Money Tree / PWW scams of old.

The site is plastered with the logos of well known businesses to ad an air of authenticity to things (just as the original hook sites used The Guardian Newspaper and CBS in the same way) yet at the bottom of the page they disingenuously ad:

This site and the products and services offered on this site are not associated, affiliated, endorsed, or sponsored by NBCNEWS, ABC, USA Today, CNN or Fox News, nor have they been reviewed tested or certified by NBCNEWS, ABC, USA Today, CNN or Fox News.

onlineincnow.com T&C Screenshot

onlineincnow.com T&C Screenshot

Despite all this, it is of course bollox set to deceive.  In fact, it now appears that it’s the well known negative option scam, used by Pacific Webworks (PWW) and Jesse Willms to good effect until they were found out.

Let’s see how this pans out, shall we?…..

Check out the T&C page from the tiny link in the page footer – screenshot on the right.

  • They say that the applicable law is the State of Florida.
  • You will become a “member” and the key phrases are here:

You must register as a “Member” with Online Income Now to access certain functions of the website. You must provide current, complete and accurate information about yourself (the “Registration Data”) when registering as a Member. You agree that such information is truthful and complete. You agree to maintain and keep your Registration Data current and to update your Registration Data as soon as it changes. You are responsible for maintaining the security of your password. Online Income Now is not liable for any loss that you suffer through the use of your password by others. You agree to notify Online Income Now immediately of any unauthorized use of your account or other breach of security known to you. You also, by becoming a Member, agree to report violations of these Terms and Conditions by others to Online Income Now.

For a limited time only, the cost of this product is $97.00 ( usual price $299.95 ) and every 32 days thereafter you will be billed the member’s only price of $9.95 for the monthly use.

MATERIALS PROVIDED TO Online Income Now OR POSTED AT ANY Online Income Now’s WEB SITE

Online Income Now does not claim ownership of the materials you provide to Online Income Now (including feedback and suggestions) or post, upload, input or submit to any Online Income Now Web Site or its associated services (collectively “Submissions”). However, by posting, uploading, inputting, providing or submitting your Submission you are granting Online Income Now, its affiliated companies and necessary sublicensees, permission to use your Submission in connection with the operation of their Internet businesses including, without limitation, the rights to: copy, distribute, transmit, publicly display, publicly perform, reproduce, edit, translate and reformat your Submission; and to publish your name in connection with your Submission.

You’ll see that “Online Income Now” will:

  • make you a “member” (of what?)
  • and you will be regularly billed, (why?)
  • and that for anything you post, upload etc (wah?  whadya mean?  Where is this uploading?),  “Online Income Now” will take no responsibility for what you do!

…………….which is curious as you don’t know what you’ll be doing and they have invited you to do it in the first place!!!

Now Lets Click The Link!  Follow that Opportunity!

onlineincnow.com screen capture 2012-12-12-17-46-50

2 Spots Left!

Amazingly (sarcasm alert) there are two “spots” left in my area!  This is the page… http://onlineincnow.com/2/index2.php

Michelle Johnson is the “guru” who will tell me everything!  So what do I do?  I have two options:

  • Back out
  • Sign up

Let’s Try Backing Out, Shall We?

CannotBackoutFromOnlineIncNow2

Cannot Backout From OnlineIncNow 2

CannotBackoutFromOnlineIncNow

Cannot Backout From OnlineIncNow

Well of course, they won’t let me.  It takes two goes to get out and the first one completely takes over the browser!  Bad.  This is B.A.D.

Ah, well.  Finally escaped.

Let’s Try Clicking to the Signup Page, Shall We?

secure.onlineincnow.com Data Entry Screen

secure.onlineincnow.com Data Entry Screen

I decide on my name, “Jobless Jake” and a random phone number…. The website is now https://secure.onlineincnow.com/2/cc_97.php

What I see is bad, really bad, and any attempt by this pack of jokers at saying they don’t run a negative option scam is now revealed on this sign-up page!

The scam is now revealed for what it is – a negative option scam!        Read it carefully…..  They expressly say;

By enrolling, you will be charged a one-time fee of $97.00

In teeny-tiny letters, note!

But remember, right back buried in the T&C’s they say;

every 32 days thereafter you will be billed the member’s only price of $9.95 for the monthly use.

This is expressly against the FTC code and laws in most countries.  If any extra charges are to be levied for any service or goods, they should be expressly stated on the sign-up page where the customer first enters their financial details.

Gotcha! You Bastards!

Okay, I’ve Had Enough of This. I’m Off!

“Not so fast, young Jobless Jake”, say onlineincnow.com……!

CannotBackoutFromOnlineIncNow3

Cannot Backout From OnlineIncNow 3

They’ve an extra 20% off plus and extra bit of webpage-erese!  The screenshot says it all, though it wasn’t the end of it.  I had one more “Leave Page” option like the earlier one above.

Conclusion

Negative Options are banned by law in most countries.  If you get collared by one, you’ll have a job stopping the bastards taking money from your account for ages.  The only sure way to stop this once you’ve been sucked in is through….

  • Chargebacks.   Get your bank or card company to get a charge-back saying the terms of trade or purchase were hidden (as seen in my screenshot above).

So………………….

  • It’s a scam.
  • Stay away from it.


Enhanced by Zemanta

Related Posts:

My Wikileaks Mirror

Strangely post on December 7th, 2010
Posted in Freedom Tags: , , , , , , ,

Wikileaks

foetusMIRROR

TERMINATED

Genuine Wikileaks Mirror © Foetus Products 1980 – 2010

http://wikileaks.foetusproducts.com/ pulled by Site5

This is a follow up to my post here.

Related Posts:

Not Bad for a Practice

Strangely post on November 23rd, 2009
Posted in Art Tags: , , , , , , , , , , , , , ,

No doubt hoards of guitar players were avidly checking James Williamson’s fingers in this clip, just to make sure they had it right!

For me, I’m just glad I’ve got to see it in case I die before May or something else happens. The guy is still great – so many fills, so many runs, and all backed up by the hard track running through.  Williamson made so many variations and overdubs, they’re all right, somehow.

Because as he’s previously said, he (they) never knew when the song would start or what Iggy would do next.  This means that when you’re used to winging it, it forces the creativity from you because you MUST keep it interesting.  The real guts of the track is here, plus some of the key riffs.

He’s a genuinely modest guy to people he respects and is fiercely proud of his achievements, as is obvious from his past interviews and just watching these clips here.

This is an unreleased acoustic track of Iggy’s and James’.  I wonder if they’ll do it in May?

Related Posts:

What is Health?

Daisaku Ikeda wrote this some time ago, and it’s just popped up in my mail for me to share.  Originally it is from his book “The New Human Revolution” but he’s also similarly described HEALTH in later small discussions on various aspects of the Lotus Sutra.  Here’s how it goes:

What Is Health?

“Health is not simply the absence of illness. Nor is it simply physical well being. Genuine health is the state in which both body and mind are vigorously and soundly engaged in the process of creation. Real health is the ability to overcome every form of adversity and use even the worst of circumstances as a springboard for new growth and development.

“Simply put, the essence of health is the constant renewal and rejuvenation of life. The fundamental entity that makes this renewal of life possible can be perceived within us as the world of Buddhahood, or the life-state of the Buddha. And I believe that Buddhism, which opens the way to this renewal of life in the real world, teaches the way to keep health at the most fundamental level.”

Related Posts:

Comments are closed

Megrahi and Calley Compared and Contrasted

Who?  Who Are Megrahi and Calley

  1. Megrahi: the only person convicted over the Lockerbie bombing

    Megrahi: only person convicted over the Lockerbie bombing

    Megrahi is a Libyan, convicted and sentenced to life imprisonment for murdering 270 people by blowing up a 747 over Lockerbie in Scotland – but released early after 8 years (but 10 years in prison) and sent to Libya to die of cancer.

  2. William Laws Calley - convicted American war criminal

    William Calley - convicted American war criminal

    Calley is an American, convicted and sentenced to life imprisonment on 22 sample charges of  murdering over 500 people by shooting, beatings, torture, mutilation and sexual abuse in Vietnam – but released early after 3 years and has so far lived quietly for over 35 years.

Further similarities and differences exist.

    1988: wreckage of Pan Am Flight 103 in a field in Lockerbie, Scotland.

    1988: wreckage of Pan Am Flight 103 in a field in Lockerbie, Scotland.

  1. Megrahi has always said he was innocent and was convicted on one piece of clothing evidence and the say-so of a disgruntled acquaintance in Malta.
      Moammar Gadhafi - Libyan Dictator

      Moammar Gadhafi - Libyan Dictator

    • It’s been suggested that people at the highest level in Libya organised the plane bombing.  Gadhafi has always remained aloof, grunted and ambiguously farted.
    • The evidence could have easily have been tampered with as it remained for many months in disputed, easily corruptible circumstances.
  2. My Lai massacre

    My Lai massacre

  3. Lt Calley admitted the murders but always claimed he was acting under orders.  This higher command, Ernest Medina, has always disputed this.  Medina too, was tried.  His trial lasted 60 mins and he was acquitted of all charges.  Nevertheless, this ‘innocent’ man’s career was over.

Current Status

When Calley was released by the soon-to-be-disgraced Republican President Nixon, many in the US and elsewhere were outraged and shocked.  Calley was hidden from view and eventually forgotten about, except for his recent admission that he’s ‘sorry every day’ – see news link.

Along with a whole charade of political shenanigans including the notable damning silence from prime Minister Brown, Megrahi has been released to Libyan custody who immediately paraded him as a Terry Waite-like hero.  The custody thing is a blur.  He will die soon.  Megrahi’s public statement on his release bears detailed reading.  If he is telling the truth, his words are those of a patient, honourable man, restraining himself against the unjust forces of the world.

  • He bears no ill-will to the Scottish people, medical and prison staff.
  • For the victims’ relatives of the bombing, he expresses sincere sympathy.
  • For his trial, he expresses disillusionment at the failings of a supposedly fair system.  I’ve studied his face in Amsterdam and elsewhere.  This is genuine.
  • Now these are his actual words:
  • I cannot find words in my language or yours that give proper expression to the desolation I have felt. This horrible ordeal is not ended by my return to Libya.

    It may never end for me until I die. Perhaps the only liberation for me will be death.

    And I say in the clearest possible terms, which I hope every person in every land will hear: all of this I have had to endure for something that I did not do.

    The remaining days of my life are being lived under the shadow of the wrongness of my conviction.

He finishes by saying,

I say goodbye to Scotland and shall not return. My time here has been very unhappy and I do not leave a piece of myself. But to the country’s people I offer my gratitude and best wishes.

Conclusion

V for vendettaThese are not the words of a lying man.  He is a disillusioned patsy, a fall-guy for bigger forces.  This is the likely reason for his release.  It’s as if there’s an un-written code that everyone knows but dare not admit – but it must be enacted to equalise the communal guilt of an informed nation that suspects a gross injustice.

V for Vendetta

V for Vendetta

Gadhafi, on the other hand, is laughing up his sleeve.  And the rabid right in the USA just use his release as fuel for their strident cries for battle.  The real power in the USA just sit tight, saving that fuel for another day, when another mass of innocents are mown down for profit in the hills of Pakistan.

Calley, exams failure of the US schools system, is right to think on his actions every day, and to think how truly lucky he is to be alive.  Dulce et decorum est pro patria mori, ha ha.

Related Posts:

© 2007-2017 Strangely Perfect All Rights Reserved -- Copyright notice by me