Introduction
I knew there was something really, really dodgy about that MyBookFace.net crap highlighted in this post the other day. Not only are they connected to some serious malware (as detailed in the posting), but they’ve an interesting line in popups!!!
Google Treasure Chest Rises Yet Again!
Here’s what to do…
- Go to http://mybookface.net making sure that you’ve emptied your browser cache and removed cookies (you will find that the popup only appears once, if you close it down. So if you need to see it again, clear your cache & cookies)
- Now click on the “Blogs” link which is
- You’ll now be presented with a popup window for San Francisco DAILY NEWS. This is located at http://www.net-news-daily.com and is yet another pseudo-news website that appears to be full of interesting links!
-
Link Information for: www.net-news-daily.com Actually, all of the links go to only a couple of destinations….. If you use the “Web Developer” plugin for Firefox, you can quickly see all the links in a web document – and in this case, there aren’t many!
- You’ll also see that the T&C type links at the page bottom don’t work!! (these are the javascript void links)
- Let’s follow the link… Where do you think it ends up?
Google Fortune – GoogleWorksToday.com
Unbelievable, isn’t it?..!!
As seen and trusted on ABC, CNBC, CNN it says!! – well that’s one way of putting it!
In essence, it’s the same old trip we’ve had from Google Treasure Chest, Google Revolution, Google Money Tree. So from now on, anything like this is lumped into one ‘thing’ called Google Bollox.
The page is actually quite inviting and not quite as gaudy as before. Apparently, you can earn up to $907 per day (damn – I was hoping for $935 again.)
The same poor logic and content checking is going on though – at the bottom they helpfully inform the reader that their product isn’t endorsed by Fox News even though this is the first actual mention of Murdoch’s child.
Also at the bottom, there’s another new company (for me) called FunWebProfits View Marketing, Inc., 642 Main Street, Nevis. Nevis is that island in the Caribbean again!
Who Are They?
This seems a relatively recent addition. A Google search on the full name and address produces nothing. However, separating the name and address into two different searches produces the now-usual crop of complaints and allegations of fraud and theft that we’ve become accustomed to.
Try FunWebProfits View Marketing, Inc., 642 Main Street, Nevis.
The Nevis address has been in these pages several times. See:
Using this earlier research, and the website: http://www.sknvibes.com/Business/Trust.cfm?Vz=1, we can say that the Nevis company is:
Nevis International Trust Co. Ltd.
Mr. Eugene Herbert
P.O. Box 642
Hamilton Development
Nevis
Tel: 1 (869) 469-5132
Fax: 1 (869) 469-5898
E-mail: inttrust@caribsurf.com
Website: http://www.inttrust.com
The header at the top of the inttrust about page says it all. It’s a dinky little island so has to make money somehow…
Nevis is an excellent jurisdiction in which to open a Limited Liability Company (LLC). The Nevis Limited Liability Company Ordinance was passed in 1995 and has become very popular.
It offers a full range of financial services and products including asset management and protection, company formation and administration, insurance, foundations, mutual funds administration, offshore banking, investment management, and trust services.
Nevis offshore companies are free from taxation and are protected in privacy by the 1985 Confidential Relationship Act.
The blurb on their website offers strict confidentiality along with business expertise from the United States and Britain!
Another interesting bit is that the copyright for this crap is claimed by a company called “View Marketing”. This makes a Google Search on them very hard, presumably by design! The inconsistent punctuation is designed to mislead, is it not? I take it they’re nothing to do with the Scottish Tourism company of the same name… etc etc etc.
Time to Sign Up! I’m In!
Because the GoogleWorksToday.com page is a “Limited Time Offer”, I thought I’d better leap in now before it’s too late…
I used my standard spam magnet email address but with a name of “Donna Kebab”(I’ll be waiting for some spam on this name, natch). I used the postcode of Scotland Yard in London and their general enquiries telephone number…. Mysteriously, I notice that they have a “mark of the devil” contact number of 877-402-2666….. Hmmm. Let’s check that out using Google, seeing as how I’m starting a new career with it today!!
Oh Dear! Best not.
This phone number already appears to have ‘prior’, as the boys in blue would say… Apart from the few scam sites like realjobsfast.com say, all the hits are complaints! Like:
- http://www.reviewopedia.com/easy-google-profit.htm – Easy Google Profit / Google Treasure Chest again!
- http://dayjobnuker.com/2009/07/24/dont-fall-for-the-stay-at-home-google-jobs-scam/
- http://www.complaintsboard.com/complaints/funwebprofitscom-c237433.html
- http://www.complaintsboard.com/complaints/google-fortune-fun-web-profits-c238489.html
- http://www.wewobo.com/wobo_google-fortune/
Needless to say, like your typical “News of the World” reporter, I’ve made an excuse and left! However, this was not before noticing that the credit card page of GoogleWorksToday.com at
..has a WHOIS of:
Registrant: View Marketing
2862 Gulf to Bay Blvd
Building A
Clearwater, Florida 33759
United StatesDomain Name: GOOGLEWORKSTODAY.COM
Created on: 22-Jul-09
Expires on: 22-Jul-10
Last Updated on: 22-Jul-09
Administrative Contact:
Marketing, View
2862 Gulf to Bay Blvd
Building A
Clearwater, Florida 33759
United States
+1.8774022666
This Florida place is in these little shack businesses, very nice.
However, spin round 180 degrees and we can find one possible source for the ‘company’ name… The large building is called “View Gardens”, ha ha!
Paths Running Deep and Murky
One of the scam site results in the Google search for the 877-402-2666 number was another pseudo news site (these must be effective because of their prevalence):
New York Reporter News at http://web.archive.org/web/20090802103410/http://news9at6.com:80/index14.php?
This scam site even has very convincing YouTube news-type videos, all targeted at the work-at-home-mom thing. As before, apart from the inbound feeds that add authenticity, there are hardly any links.
Most links point to this sucker-inner website:
http://web.archive.org/web/20090809071637/http://news9at6.com:80/google14.php?arid=
which redirects to:
…that will have an aura of familiarity for readers of my Google Treasure Chest – it’s a scam and a half! posting from April (yes, it’s processcartcenter.com again) and also, it’s exactly the same Google Fortune page as before, but with a different address…..
Whois, Who Are They?
All is not lost. Check out the IP addresses in the WHOIS’s for processcartcenter.com and googleworkstoday.com which are:
- 209.90.119.16
- 209.90.119.11
These are obviously related. Now if you suspect that they live in Utah, I’m not betting any money with you. The WHOIS for both these IP addresses is:
Fibernet Corporation: 1155 S 800 E, Orem, Utah 84097
Talk about keeping it in the family!
The Tabernacle-like building houses 3 companies:
Of the three, Fiber.net (sic) has definitely been involved in spamming from 1997 through to at least 2007. Nethosting.com seems to be a standard webhosting entity with the usual good and bad references.
Ceristar seems a bit odd, to say the least! Their previously posted domain name ceristar.com is up for sale and since 2000 they have had a host of double stock swapping company mergers and takeovers. Their stock exchange reference (OTC BB: CTRI) now seems to point to a Chinese Organic Food business, which wholly at odds with previous references to the company setting up ISP-related connections to all and sundry in Utah.
Conclusion
Scam, scam and thrice scam.
The only thing missing from this ferago of twisted and hidden businesses is some references to County Durham, Gibraltar, Pasig City or Nicosia, Cyprus.
No doubt they’ll pop up soon (pun intended)
Naturally, DO NOT SIGN UP FOR ANY OF THESE “OPPORTUNITIES”!!!
Follow the Guidance given in Google Treasure Chest – it’s a scam and a half!, Google Revolution, Different Name, Same Scam!, More on Google Profits and Pacific Webworks, Robert G Allen, Grants, and a Credit Card Slimeball
Between these articles I’ve now produced clear links between the various scam operations, their money stashed overseas and their business entity partners and covers in the USA and elsewhere.
DO NOT SIGN UP FOR ANYTHING – FINAL WARNING
Well. After well under a day, “Donna Kebab” got her first email from a spammer. It’s from cheery Michael Vincent again. The trackgum.com address is redirected to
Feel free to sign away your life to the “Underground Cash Secret”– you can guess my opinion on it by now…..surely? (and don’t call me surely)
“Underground Cash Secret” is neither “underground”, nor is it a “secret” and there’s no cash…. – so you work it out! Even “Michael Vincent’s photo is false, as has been mentioned previously here and elsewhere!
Here is the email content(my email address is replaced by the fictional bollochio one and all links are de-activated so you’ll need to copy & paste to see the links work)….
Spam, spam, and thrice spammed. Send me more – I need better than this crap…It’s so boring.
….and two more Donna kebabs please?
Yup! The spam above was followed very rapidly by two more for “Donna Kebab”. This time only the briefest of details, and I promise I’ll only describe future ones if there’s something significantly out of the ordinary to warrant it.
‘Newsletter International’ in Florida is not up these trees in the picture below; or in the pond; or sat on the hydrant like an invisible gnome!
No! It’s in the shopping centre (English for ‘Mall’) in the background(the satellite view is clearer). This has a host of handy businesses for the busy spammers – even a Starbucks…woo-hoo!!
View Larger Map
how do I get these spammers to stop sending this crap. I continually black list, but they send another.
@larry
Basically, that’s the point of this post (and other earlier ones). They all say
…..and then will continue to spam you whether you hit the un-subscribe button or not!!! I’m afraid you’re stuck with them is the answer.
Depending on how you get your email I can recommend two routes to make life easy…
1. If you download your email to your PC (usually by POP3), Mailwasher Pro works well for me – I’ve used it for over half a decade now and all program updates are free for ever.
2. If you use web-mail, GMail/GoogleMail works best and it has a highly effective spam filter that only needs checking occasionally.
One useful trick for free, (the third way!!), and it’s really fast as well, is to set up GMail to look at your POP3 mailboxes and it will sift the spam nicely from them as it picks the mail up! You only need to check your GoogleMail and it’s already pulled through email from your external POP3 mailboxes.
I’ve tried all the above methods and they all work pretty well. Blacklisting doesn’t really work. You need an automated system that uses heuristics that flags your spam, for which there are free and paid systems (as above).
Good luck.
"https://www.sundaybikerides.com/MTAxNjh8MjQwN3wzNzYxNjh8djI=/ifign4b9/g"
how about this address – it looks like the same scam???
@Carrie
It certainly is! As well as looking like it, the images are served from Bloosky/red26 Marketing Llc on the pantherssl.com server. Just check out the full address of the main picture on-screen at:
This appeared in my first investigation into this cesspit of doom at http://strangelyperfect.tv/3099/google-treasure-c…
So from Google Treasure Chest, to Google Fortune to SundayBikeRides!!!
Help! OK, now that they have my Visa Info for a supposed 1.97 for mailing what do I do?
I'll contact the Credit Union immediately about blocking Visa charges but I suppose they could use any name.
Suggestions?
Barry Mower
@Barry.
I'm not sure about Credit Unions and how they fit in with 'normal' finance. However, you also mention Visa which is the Credit Card company, and if this is how you've gone, then the general principle of instigating a charge-back (because the T&Cs are confusing etc and the advertising is misleading – i.e. it's no good having the advert say you WILL earn zillions in HUGE letters only to disclaim that promise in teeny-weeny letters), hold good.
You can try and cancel, which you MUST do A.S.A.P. but you'll have probably realised that this 'service' the various scam companies 'offer' is a bit of a lottery, and because of this, it cannot be relied upon.
Check out the Chris Malta video below. He also has a wodge of good, anti-scammer information on his website, link here
https://youtu.be/3-mOrGwoRAs