Tag Archive: P.O. Box 642

From Google Treasure Chest to Sun Tan Scam in Nevis on the BBC?

From Google Treasure Chest to Ubertan Sun Tan Scam in Nevis on the BBC?

A.  yes it’s true!

Ubertan On BBC

Ubertan On BBC

An article on the BBC website today highlighted the dangers of a tanning products called Ubertan.  On reading it, and following up with a simple Google search, the way it is portrayed in forums immediately set off warning bells because of its similarity to other scams I’ve seen.

Ubertan

Ubertan Search

Ubertan Search

A simple Google search showed that warnings about Ubertan have been going on for some time.  This website warned way back in April 2011 and here we have a Mens’s Health forum being shilled by Ubertanners with a post starting in Jan 2011…  The first even shows that the Ubertan website changed it’s copy when folks started complaining.

The Ubertan website is currently ‘live’ however, it is showing no content!  At all!  The Google cache is interesting though (more on that later)…

WHOIS Ubertan

Ubertan WHOIS

Ubertan WHOIS

Who is Ubertan indeed?  !!

WarningBell

Warning Bell

What we see is that “Manufacturers Direct” owns several domains and one Vernon Veira is the contact on the dual island nation of Kitts-Nevis.

10 Solomons Arcade
Charlestown,  00000
KN
+1.3057484919

This is when the warning bells started ringing….

Doing The Charlestown in Nevis

It’s two years ago that I started looking at the now seriously-discredited Google Treasure Chest scam (see http://strangelyperfect.tv/3099/google-treasure-chest-its-a-scam-and-a-half/).  the amount of information I had, meant I had to post over several different postings, and it was during these later investigations that a Post Office address (P.O. Box) came up on Nevis.  In Charlestown.

Unfortunately, I couldn’t remember exactly what address it was.  But it’s easily found here a comment from @NotKevin.  I think it’s the first time we saw the address, although it has since popped up many times when checking out folks that would be preferred to be known as “online marketeers” but we like to call scammers.  This is on the posting,

This is the address.

New Online Systems Ltd.
P.O. Box 642, Main Street
Charlestown, Nevis, West Indies

Google Cache

Ubertan Google Cache

Ubertan Google Cache

Ubertan may be silent, but the Google Cache is active and shows this address down at the bottom of the first cached page:

Ubertan.com +44 161 408 5816
Subertan Ltd 642 Main Street, Charlestown, Nevis

 

Uber morphs into Suber, and because the Post Office on Charlestown is one of the few buildings on Main  Street, Charlestown; a whole host of P.O. Boxes exist inside.

P.O. Box 642 means 642 Main Street!

Who are these people using 642?  I don’t know.

What I do know is that the domains listed by @NotKevin, although not exactly the same,  bear a shocking similarity to those domains used by people like Jesse Willms (say) before he decided to turn into a saint-like activist and Pacific WebWorks (say) before they got their pants sued off them.  This is what @NotKevin said:

That West Indies address is also linked with porn:
http://www.highdefriches.com/contact.php
http://www.eshspt.com/
(another Co Durham address on that one too!)
“health products”:
http://hiltonhg.com/
Colon cleansing:
http://www.colocleansemax.com/contact-us.php
Acai:
http://acaidetoxmaxx.com/
and Govt Grants:
http://www.complaintsboard.com/complaints/government-grants-avaliable-cd-c116063.html

Now compare and contrast those domains and businesses with the very large list to be found here on WebCops – the plethora of time-limited similarly-named domains means tracking them is an onerous task, well beyond my spare time.

However, yet again, we have seen the same address appear when dealing with dodgy ego-massaging products.

Phoenix-Like TryUbertan

Ubertan may be dead, but it doesn’t take long to find son-of-Ubertan when looking at the decidedly un-Caribbean telephone number for Ubertan.

+44 161 408 5816 is actually a Manchester, UK number!!

TryUbertan Contact Page

TryUbertan Contact Page

A quick search pulls out…..

Beginnings

Now I know they’re trying to hide!!!

TryUbertan.net on the T&C page now shows the address of Ubertan to be:

Ubertan Sunless Tanning System
c/o Toocoo Media Inc.
39555 Orchard Hill Place
Suite 600
Novi, Michigan
48375

Although it’s supposed to be available from ” high end salons in the U.K, France, Germany, Spain and North America” from their FAQ page, these stores will be doing so ILLEGALLY!  The UK government has officially banned it (as per the UK news item) and is EXPLICITLY ISSUING DANGER WARNINGS about its usage!

Still, TryUbertan (WHOIS is Pennsylvania USA) don’t care.  They’ll just grab the cash and morph into something else.

TooCoo Media CEO

TooCoo Media CEO

The decidedly minimalist website of Toocoo Media Inc, http://www.toocoomedia.com, throws up some interesting conundrums, if that really is their mailing address.  There are two LinkedIn links:

  • http://www.linkedin.com/company/toocoo-media-inc.
  • http://www.linkedin.com/in/jumanok

The latter is for the CEO, a Peter B. Lee whose 3 website links at the bottom of his profile point to the totally and bizarrely un-related websites of:

  • http://www.viafoura.com/
  • https://www.netiq.com/products/migrate/ which then redirects to novell.com as Novell has bought them out
  • http://www.oracle.com/index.html

Mr Lee, who claims to be Canadian from the LinkedIn profile, also has a poetry blog on blogger assuming the same quite distinct user name is being re-used, which is for invited guests only!!!  See The Poetry of Peter B. Lee with the url of http://jumanok.blogspot.com/  I’ve highlighted his key username as it matches the LinkedIn profile.  I don’t think that this Peter Lee (interestingly, a place name in County Durham of all places!) is the same who’s name is used in some recent versions of the classic 419 scam.  Try these examples for a start:

To add to the surreal mix that I’m uncovering, there are also two videos on YouTube uploaded by a “jumanok”!!  One of half a minute looks very much like Mr Lee, doing  some testing thing in Nov 2008 here:

This is a screenshot in case it’s pulled:

Jumanok YouTube

Jumanok YouTube

This is Jumanok from LinkedIn:

Jumanok LinkedIn LargePic

Jumanok LinkedIn LargePic

And here is “Crystal” telling us how her life state has improved after seeing something on OPRAH (down below she says) – except there’s nothing below!!  It appears to be a video plug for something intended to include Oprah in the spiel, except it never happened as there’s nowt to see.  This was uploaded in May, 2009.  The termination of Oprah-related plans may or may not have had something to do with the legal action, taken in May 2009, by Oprah, and reported here on her website;

http://www.oprah.com/health/The-Truth-About-Oprah-Dr-Oz-Acai-Resveratrol-and-Colon-Cleanse

Of course, Oprah sued and won damages against a host of scammers, one of which was Jesse Willms.

Conclusion

  • Time and again we come across scams that are based on a business with a very flakey base (here it’s a banned tanning product with government issued health warnings).  Usually, they are about improving one’s body or finances via unproven “new” medicines or foodstuffs, or get-rich-quick schemes.
  • Time and again we find a myriad of international contact phone numbers & addresses, for businesses that are very minor and specialist yet feel the need to spread themselves to the far corners of the globe.  Q. Why?  A.  Avoidance of easy scrutiny.
  • Time and again, we trace these businesses via LinkedIn (a bit like Jonathon Eborn, say) and other social networks high and wide.  They all start off appearing very legitimate.   As an aside, the Eborn results show a consulting website of http://www.jonathanebornconsulting.com/ and another of http://www.jonathandeborn.com/ which have both been hacked and defaced!  Made my day that!
  • Many businesses have a very public website, of minimalist design and content.  It’s very hard to discern exactly what they’re doing.  Compare these “online marketeers” to the website of Ford or Esso, say?  Now can you tell the difference?

Finally, (and very importantly for your health).  Don’t shove dodgy untested stuff of unknown provender up your nose.  Simple eh?

Related Posts:

MyBookface, Google, Utah and Nevis Scamboys United

Introduction

I knew there was something really, really dodgy about that MyBookFace.net crap highlighted in this post the other day. Not only are they connected to some serious malware (as detailed in the posting), but they’ve an interesting line in popups!!!

Google Treasure Chest Rises Yet Again!

Here’s what to do…

Blogs » MyBookFace (Powered by phpFoX)

Blogs » MyBookFace

  1. Go to http://mybookface.net making sure that you’ve emptied your browser cache and removed cookies (you will find that the popup only appears once, if you close it down. So if you need to see it again, clear your cache & cookies)
  2. Now click on the “Blogs” link which is
    • You’ll now be presented with a popup window for San Francisco DAILY NEWS. This is located at http://www.net-news-daily.com and is yet another pseudo-news website that appears to be full of interesting links!
  3. Link Information for: www.net-news-daily.com

    Link Information for: www.net-news-daily.com

    Actually, all of the links go to only a couple of destinations….. If you use the “Web Developer” plugin for Firefox, you can quickly see all the links in a web document – and in this case, there aren’t many!

    • You’ll also see that the T&C type links at the page bottom don’t work!! (these are the javascript void links)
  4. Let’s follow the link… Where do you think it ends up?

Google Fortune – GoogleWorksToday.com

Unbelievable, isn’t it?..!!

Google Fortune - Earn Money Using Google!

Google Fortune - Earn Money Using Google!

As seen and trusted on ABC, CNBC, CNN it says!! – well that’s one way of putting it!

In essence, it’s the same old trip we’ve had from Google Treasure Chest, Google Revolution, Google Money Tree. So from now on, anything like this is lumped into one ‘thing’ called Google Bollox.

The page is actually quite inviting and not quite as gaudy as before. Apparently, you can earn up to $907 per day (damn – I was hoping for $935 again.)

The same poor logic and content checking is going on though – at the bottom they helpfully inform the reader that their product isn’t endorsed by Fox News even though this is the first actual mention of Murdoch’s child.

Also at the bottom, there’s another new company (for me) called FunWebProfits View Marketing, Inc., 642 Main Street, Nevis. Nevis is that island in the Caribbean again!

Who Are They?

This seems a relatively recent addition. A Google search on the full name and address produces nothing. However, separating the name and address into two different searches produces the now-usual crop of complaints and allegations of fraud and theft that we’ve become accustomed to.

Try FunWebProfits View Marketing, Inc., 642 Main Street, Nevis.

The Nevis address has been in these pages several times. See:

Using this earlier research, and the website: http://www.sknvibes.com/Business/Trust.cfm?Vz=1, we can say that the Nevis company is:

Nevis International Trust Co. Ltd.
Mr. Eugene Herbert
P.O. Box 642
Hamilton Development
Nevis
Tel: 1 (869) 469-5132
Fax: 1 (869) 469-5898
E-mail: [email protected]
Website: http://www.inttrust.com

The header at the top of the inttrust about page says it all. It’s a dinky little island so has to make money somehow…

Nevis is an excellent jurisdiction in which to open a Limited Liability Company (LLC). The Nevis Limited Liability Company Ordinance was passed in 1995 and has become very popular.

It offers a full range of financial services and products including asset management and protection, company formation and administration, insurance, foundations, mutual funds administration, offshore banking, investment management, and trust services.

Nevis offshore companies are free from taxation and are protected in privacy by the 1985 Confidential Relationship Act.

The blurb on their website offers strict confidentiality along with business expertise from the United States and Britain!

Another interesting bit is that the copyright for this crap is claimed by a company called “View Marketing”. This makes a Google Search on them very hard, presumably by design! The inconsistent punctuation is designed to mislead, is it not? I take it they’re nothing to do with the Scottish Tourism company of the same name… etc etc etc.

Time to Sign Up! I’m In!

Google Fortune - Earn Money Using Google: Credit Card Entry Page

Google Fortune - Earn Money Using Google: Credit Card Entry Page

Because the GoogleWorksToday.com page is a “Limited Time Offer”, I thought I’d better leap in now before it’s too late…

I used my standard spam magnet email address but with a name of “Donna Kebab”(I’ll be waiting for some spam on this name, natch). I used the postcode of Scotland Yard in London and their general enquiries telephone number…. Mysteriously, I notice that they have a “mark of the devil” contact number of 877-402-2666….. Hmmm. Let’s check that out using Google, seeing as how I’m starting a new career with it today!!

Oh Dear! Best not.

This phone number already appears to have ‘prior’, as the boys in blue would say… Apart from the few scam sites like realjobsfast.com say, all the hits are complaints! Like:

Needless to say, like your typical “News of the World” reporter, I’ve made an excuse and left! However, this was not before noticing that the credit card page of GoogleWorksToday.com at

..has a WHOIS of:

Registrant: View Marketing
2862 Gulf to Bay Blvd
Building A
Clearwater, Florida 33759
United States

Domain Name: GOOGLEWORKSTODAY.COM
Created on: 22-Jul-09
Expires on: 22-Jul-10
Last Updated on: 22-Jul-09
Administrative Contact:
Marketing, View
2862 Gulf to Bay Blvd
Building A
Clearwater, Florida 33759
United States
+1.8774022666

This Florida place is in these little shack businesses, very nice.

However, spin round 180 degrees and we can find one possible source for the ‘company’ name… The large building is called “View Gardens”, ha ha!

Paths Running Deep and Murky

One of the scam site results in the Google search for the 877-402-2666 number was another pseudo news site (these must be effective because of their prevalence):

New York Reporter News at http://web.archive.org/web/20090802103410/http://news9at6.com:80/index14.php?

Jobs - Employment - New York Local News: Scam site

Jobs - Employment - New York Local News: Scam site

This scam site even has very convincing YouTube news-type videos, all targeted at the work-at-home-mom thing. As before, apart from the inbound feeds that add authenticity, there are hardly any links.

Most links point to this sucker-inner website:

http://web.archive.org/web/20090809071637/http://news9at6.com:80/google14.php?arid=

which redirects to:

Google Fortune - Earn Money Using Google! This time at https://www.processcartcenter.com

Google Fortune - Earn Money Using Google! This time at https://www. processcart center.com

…that will have an aura of familiarity for readers of my Google Treasure Chest – it’s a scam and a half! posting from April (yes, it’s processcartcenter.com again) and also, it’s exactly the same Google Fortune page as before, but with a different address…..

Whois, Who Are They?

All is not lost. Check out the IP addresses in the WHOIS’s for processcartcenter.com and googleworkstoday.com which are:

  • 209.90.119.16
  • 209.90.119.11

These are obviously related. Now if you suspect that they live in Utah, I’m not betting any money with you. The WHOIS for both these IP addresses is:

Fibernet Corporation: 1155 S 800 E, Orem, Utah 84097

Talk about keeping it in the family!

The Tabernacle-like building houses 3 companies:

Of the three, Fiber.net (sic) has definitely been involved in spamming from 1997 through to at least 2007. Nethosting.com seems to be a standard webhosting entity with the usual good and bad references.

Ceristar seems a bit odd, to say the least! Their previously posted domain name ceristar.com is up for sale and since 2000 they have had a host of double stock swapping company mergers and takeovers. Their stock exchange reference (OTC BB: CTRI) now seems to point to a Chinese Organic Food business, which wholly at odds with previous references to the company setting up ISP-related connections to all and sundry in Utah.

Conclusion

Scam, scam and thrice scam.

The only thing missing from this ferago of twisted and hidden businesses is some references to County Durham, Gibraltar, Pasig City or Nicosia, Cyprus.

No doubt they’ll pop up soon (pun intended)

Naturally, DO NOT SIGN UP FOR ANY OF THESE “OPPORTUNITIES”!!!
Follow the Guidance given in Google Treasure Chest – it’s a scam and a half!, Google Revolution, Different Name, Same Scam!, More on Google Profits and Pacific Webworks, Robert G Allen, Grants, and a Credit Card Slimeball
Between these articles I’ve now produced clear links between the various scam operations, their money stashed overseas and their business entity partners and covers in the USA and elsewhere.
DO NOT SIGN UP FOR ANYTHING – FINAL WARNING

Related Posts:

© 2007-2017 Strangely Perfect All Rights Reserved -- Copyright notice by me