From Google Treasure Chest to Sun Tan Scam in Nevis on the BBC?

 Posted by  Comments Off on From Google Treasure Chest to Sun Tan Scam in Nevis on the BBC?
Aug 012011
 

From Google Treasure Chest to Ubertan Sun Tan Scam in Nevis on the BBC?

A.  yes it’s true!

Ubertan On BBC

Ubertan On BBC

An article on the BBC website today highlighted the dangers of a tanning products called Ubertan.  On reading it, and following up with a simple Google search, the way it is portrayed in forums immediately set off warning bells because of its similarity to other scams I’ve seen.

Ubertan

Ubertan Search

Ubertan Search

A simple Google search showed that warnings about Ubertan have been going on for some time.  This website warned way back in April 2011 and here we have a Mens’s Health forum being shilled by Ubertanners with a post starting in Jan 2011…  The first even shows that the Ubertan website changed it’s copy when folks started complaining.

The Ubertan website is currently ‘live’ however, it is showing no content!  At all!  The Google cache is interesting though (more on that later)…

WHOIS Ubertan

Ubertan WHOIS

Ubertan WHOIS

Who is Ubertan indeed?  !!

WarningBell

Warning Bell

What we see is that “Manufacturers Direct” owns several domains and one Vernon Veira is the contact on the dual island nation of Kitts-Nevis.

10 Solomons Arcade
Charlestown,  00000
KN
+1.3057484919

This is when the warning bells started ringing….

Doing The Charlestown in Nevis

It’s two years ago that I started looking at the now seriously-discredited Google Treasure Chest scam (see https://strangelyperfect.tv/3099/google-treasure-chest-its-a-scam-and-a-half/).  the amount of information I had, meant I had to post over several different postings, and it was during these later investigations that a Post Office address (P.O. Box) came up on Nevis.  In Charlestown.

Unfortunately, I couldn’t remember exactly what address it was.  But it’s easily found here a comment from @NotKevin.  I think it’s the first time we saw the address, although it has since popped up many times when checking out folks that would be preferred to be known as “online marketeers” but we like to call scammers.  This is on the posting,

This is the address.

New Online Systems Ltd.
P.O. Box 642, Main Street
Charlestown, Nevis, West Indies

Google Cache

Ubertan Google Cache

Ubertan Google Cache

Ubertan may be silent, but the Google Cache is active and shows this address down at the bottom of the first cached page:

Ubertan.com +44 161 408 5816
Subertan Ltd 642 Main Street, Charlestown, Nevis

 

Uber morphs into Suber, and because the Post Office on Charlestown is one of the few buildings on Main  Street, Charlestown; a whole host of P.O. Boxes exist inside.

P.O. Box 642 means 642 Main Street!

Who are these people using 642?  I don’t know.

What I do know is that the domains listed by @NotKevin, although not exactly the same,  bear a shocking similarity to those domains used by people like Jesse Willms (say) before he decided to turn into a saint-like activist and Pacific WebWorks (say) before they got their pants sued off them.  This is what @NotKevin said:

That West Indies address is also linked with porn:
https://www.highdefriches.com/contact.php
https://www.eshspt.com/
(another Co Durham address on that one too!)
“health products”:
http://hiltonhg.com/
Colon cleansing:
https://www.colocleansemax.com/contact-us.php
Acai:
http://acaidetoxmaxx.com/
and Govt Grants:
https://www.complaintsboard.com/complaints/government-grants-avaliable-cd-c116063.html

Now compare and contrast those domains and businesses with the very large list to be found here on WebCops – the plethora of time-limited similarly-named domains means tracking them is an onerous task, well beyond my spare time.

However, yet again, we have seen the same address appear when dealing with dodgy ego-massaging products.

Phoenix-Like TryUbertan

Ubertan may be dead, but it doesn’t take long to find son-of-Ubertan when looking at the decidedly un-Caribbean telephone number for Ubertan.

+44 161 408 5816 is actually a Manchester, UK number!!

TryUbertan Contact Page

TryUbertan Contact Page

A quick search pulls out…..

http://tryubertan.net/?page_id=6

Now I know they’re trying to hide!!!

TryUbertan.net on the T&C page now shows the address of Ubertan to be:

Ubertan Sunless Tanning System
c/o Toocoo Media Inc.
39555 Orchard Hill Place
Suite 600
Novi, Michigan
48375

Although it’s supposed to be available from ” high end salons in the U.K, France, Germany, Spain and North America” from their FAQ page, these stores will be doing so ILLEGALLY!  The UK government has officially banned it (as per the UK news item) and is EXPLICITLY ISSUING DANGER WARNINGS about its usage!

Still, TryUbertan (WHOIS is Pennsylvania USA) don’t care.  They’ll just grab the cash and morph into something else.

TooCoo Media CEO

TooCoo Media CEO

The decidedly minimalist website of Toocoo Media Inc, https://www.toocoomedia.com, throws up some interesting conundrums, if that really is their mailing address.  There are two LinkedIn links:

  • https://www.linkedin.com/company/toocoo-media-inc.
  • https://www.linkedin.com/in/jumanok

The latter is for the CEO, a Peter B. Lee whose 3 website links at the bottom of his profile point to the totally and bizarrely un-related websites of:

  • https://www.viafoura.com/
  • https://www.netiq.com/products/migrate/ which then redirects to novell.com as Novell has bought them out
  • https://www.oracle.com/index.html

Mr Lee, who claims to be Canadian from the LinkedIn profile, also has a poetry blog on blogger assuming the same quite distinct user name is being re-used, which is for invited guests only!!!  See The Poetry of Peter B. Lee with the url of http://jumanok.blogspot.com/  I’ve highlighted his key username as it matches the LinkedIn profile.  I don’t think that this Peter Lee (interestingly, a place name in County Durham of all places!) is the same who’s name is used in some recent versions of the classic 419 scam.  Try these examples for a start:

To add to the surreal mix that I’m uncovering, there are also two videos on YouTube uploaded by a “jumanok”!!  One of half a minute looks very much like Mr Lee, doing  some testing thing in Nov 2008 here:

This is a screenshot in case it’s pulled:

Jumanok YouTube

Jumanok YouTube

This is Jumanok from LinkedIn:

Jumanok LinkedIn LargePic

Jumanok LinkedIn LargePic

And here is “Crystal” telling us how her life state has improved after seeing something on OPRAH (down below she says) – except there’s nothing below!!  It appears to be a video plug for something intended to include Oprah in the spiel, except it never happened as there’s nowt to see.  This was uploaded in May, 2009.  The termination of Oprah-related plans may or may not have had something to do with the legal action, taken in May 2009, by Oprah, and reported here on her website;

https://www.oprah.com/health/The-Truth-About-Oprah-Dr-Oz-Acai-Resveratrol-and-Colon-Cleanse

Of course, Oprah sued and won damages against a host of scammers, one of which was Jesse Willms.

Conclusion

  • Time and again we come across scams that are based on a business with a very flakey base (here it’s a banned tanning product with government issued health warnings).  Usually, they are about improving one’s body or finances via unproven “new” medicines or foodstuffs, or get-rich-quick schemes.
  • Time and again we find a myriad of international contact phone numbers & addresses, for businesses that are very minor and specialist yet feel the need to spread themselves to the far corners of the globe.  Q. Why?  A.  Avoidance of easy scrutiny.
  • Time and again, we trace these businesses via LinkedIn (a bit like Jonathon Eborn, say) and other social networks high and wide.  They all start off appearing very legitimate.   As an aside, the Eborn results show a consulting website of https://www.jonathanebornconsulting.com/ and another of https://www.jonathandeborn.com/ which have both been hacked and defaced!  Made my day that!
  • Many businesses have a very public website, of minimalist design and content.  It’s very hard to discern exactly what they’re doing.  Compare these “online marketeers” to the website of Ford or Esso, say?  Now can you tell the difference?

Finally, (and very importantly for your health).  Don’t shove dodgy untested stuff of unknown provender up your nose.  Simple eh?

Dec 212010
 

Who Is Robert Allen?

For an answer to this, see these posts and follow up comments:

These posts are all related either by Robert Allen and/or the email and websites that advertise products like his and others.  To me, they are all scum, although they may not be actually related.

Facebook Advert

FacebookAdforRobertAllen

Facebook Ad for Robert Allen

Today I got a depressingly familiar advert on my Facebook homepage.  This is it here on the left.

echo-news.co.uk version

On checking with TinEye, I found at least one other example of the image at https://www.echo-news.co.uk/resources/images/656796/ which is the one on the right.

Call me mad, but isn’t there something wrong about the three components of the image – the house, car and bloke – they just don’t look right!

I now followed through on the link to see what my 2011 Deam Lifestyle would be like…..

Fake News Site at wbcnewsonline.com

Is Working Online At Home The Next Gold Rush

This news site is called “News11 Today” and is notable for the complete absence of the French newsreader Melissa Therieau!  This is the full screen grab on the right.

It has the tagline:

“Is Working Online At Home The Next Gold Rush”

Unfortunately, the image and caption at the top right of the fake news site have this extract, which I’ve shown on the here below:

News11 blatant Google Lie

News11 blatant Google Lie

News11 blatant Google Lie

And it is a blatant lie!

To para-quote;

“Google have NOT opened their doors and are NOT allowing the public to post links from the comfort of their homes on THEIR website.”

In fact Google have always had a pretty open door policy and allow anyone to post adverts for search or display adverts on their own website for fees.  They have always done it!!!

It’s what they do.

Google is an advert sponsored search engine!!!

It’s how they make their money!

Advert Link – the real monkey.

The whole point of the fake news site “News11 Today” is the promotion of a single advert which they claim is for:

Automated Home Profits.

The Automated Home Profits link actually goes to

wbcnewsonline.com

http://wbcnewsonline.com/business/uk-breaking-news002.php?c1=gb&c2=m&c3=24any&c4=1

Regular readers of these pages will not be surprised to learn that this “business” hides their identity (see my opinion on hidden identity here) – see WHOIS link

And knowledgable and wise internet folk will also not be surprised that the link takes you to a typically gaudy Get-Rich-Quick website, prototing the dubious merits of Robert Allen.  This time it is called… wait for it (drumroll)…

Home Wealth Package

Home Wealth Package - 1st page

Home Wealth Package - 1st page

The actual URL (after a redirect from http://wbcnewsonline.com/business/read-more.php) is http://apply.robertallenswealthpackage.com/?hop=rgamedia&c1=467659339&c2=400444 and it looks like the screenshot on the left.

Amazingly, there are only 5 places remaining!  (This dubious sales tactic is everywhere on the web as well as normal retail – this post I wrote over two days and in the morning there were still 5 places remaining, gosh.)

Now obviously, this is a pile of poo.  But when you try to leave you get:

“The begging prompt” – see here:

Please Don't Go!

You will notice that the cakground has changed….?  This is because the page has redirected to another one already!  It’s:

http://apply.robertallenswealthpackage.com/qualified/

Home Wealth Package - qualified!

Home Wealth Package - qualified!

..which means that trying to close the crap, qualifies me for an e-e-e-even more special offer that allows me to earn up to £379 per day (actually, I won’t get out of bed for less than £380 a day, so they’ve failed on that one).   This is the full page on the left.

An analysis of the page shows the same “loadsa money” girl from the Google Treasure Chest templates and I even spotted one iStockPhoto in the guise of the couple called “Jane & Jeremy C – Liverpool, UK”.

But check the bottom of the page – they carefully state in the smallest font known to mankind that,

Photos used are Not of actual customers.

Well that’s alright then.

Another thing that is obviously alright as it obviously does not seek to decieve is the disclaimer in tiny font at the bottom that states,

Home Wealth Package is not associated with CNN, People and TIME

…despite the prominently displayed logos at the top of the page.  This behaviour also occurred on the first landing page.  See two screenshots below.

This is a common pattern of behaviour for these scam get-rich-quick websites – they almost always have huge random logos of reputable internet businesses which are then diclaimered away in tiny printy at the botoom of the page.

Sign Up & Start Earning!  Rush My Order!

Handily there’s still five “positions” remaining….  Better get one fast, eh?  Clicking the nice large buttons takes me to this screen, where the logo disclaimer is now noticable by its absence!

Home Wealth Package - signup start

Home Wealth Package - signup start

Please note the text at the bottom which states “We respect your privacy and will not rent or share your information with anyone.”   – –  This is NOT what happened when I did this previously (see links at beginning of this post).  At that time my email address was mercilessly spread around like confetti!

Get Started Now!

Click Bank Payment Form

Click Bank Payment Form

Clicking that button takes me to the Click Bank form where I would normally pay my £19.97.

At this point I left but consider what Robert Allen and his marketteers now have, even though I haven’t bought anything…?

  • They have my name.
  • They have my phone number.
  • They have my email address.

Fortunately, I gave my name as Mystic Meg, my phone number is that of Scotland Yard and my email address is my spam harvester.

But for anyone else suckered into this tissue of lies, they’d now be open to even more spam as an absolute minimum.

Co-incidence?

Co-incidentally with my observance of the Facebook advert, I got some email spam this morning onto a little-used email address that wanted to sell me email spam lists by profession! It looks like the start of a new campaign.

This is it with my email xxxx-ed out:

Return-path: <henryjones@mail.sernam.gob.cl>

Envelope-to: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

Delivery-date: Mon, 20 Dec 2010 18:07:23 -0600

Received: from smtp.sernam.cl ([163.247.58.25] helo=mail.sernam.cl)

by junction.site5.com with esmtps (TLSv1:AES128-SHA:128)

(Exim 4.69)

(envelope-from <henryjones@mail.sernam.gob.cl>)

id 1PUplC-00085r-Ol

for xxxxxxxxxxxxxxxxxxxxxx; Mon, 20 Dec 2010 18:07:22 -0600

Received: from dockside (66.197.135.92) by mail.sernam.cl (192.168.254.106)

with Microsoft SMTP Server id 8.1.436.0; Mon, 20 Dec 2010 21:04:21 -0300

To: <mbainfo@lcb.uoregon.edu>, <forms@sazi.ru>, <info@commonstream.org>,

<xxxxxxxxxxxxxxxxxxxxxxxxx>, <cvumnxcm@waswngvv.com>,

<doreen@kautschuk.orkanspende.de>

Subject: [rft 20] : dentist mailing lists

Reply-To: <henryjones@mail.sernam.gob.cl>

From: rule <henryjones@mail.sernam.gob.cl>

MIME-Version: 1.0

Content-Type: text/plain

Message-ID: <733dd05c-4edd-4671-9128-dd7a610aa6d3@CorreoCas2.sernam2k.cl>

Date: Mon, 20 Dec 2010 21:04:21 -0300

Received-SPF: None (CorreoCas2.sernam2k.cl: henryjones@mail.sernam.gob.cl

does not designate permitted sender hosts)

 

Below is a catalog of all our lists and the corresponding prices:

 

note: all lists are optin and sold with unlimited use rights

 

HEALTH RELATED LISTS

Any Individual list below $109 ea OR 2 for $179 (Only until Friday)

 

-> Complete US Physicians Database

-> Chiropractic Doctors in the USA

-> American Holistic Medicine Providers/Clinics

-> General Dentists in the USA

-> Dentists with Specialties

-> American Veterinarians & Veterinary Clinics

-> US Hospitals

-> Nursing Homes int the US

-> Pharmaceutical Company Employees

-> Physical/Occupational Therapy Clinics and Therapists in the US

-> Oncology Physicians in the US

-> US Surgery Centers

-> Massage Therapists/Therapy Clinics in America

-> Acupuncturists/clinics in the US

-> Medical Equipment Suppliers(USA)

-> Mental Health Counselors (USA)

-> Optometrists/Clinics (USA)

-> Psychologists (USA)

 

BUSINESS RELATED LISTS

Take any individual list below for just $137 each (Only until Friday)

 

-> Hotels in the USA

-> Realtors in the USA

-> USA Business Database

-> Manufacturer Database (USA)

-> Financial Planner Database (USA)

-> Finance & Professionals Database (USA)

-> Insurance Agents (USA)

-> Canadian Businesses

-> United Kingdom Business Database

-> Media Outlet Contacts (USA)

 

CONSUMER RELATED LISTS

$97 each (only until Fri)

 

-> USA Consumer Database

-> Credit Inquiries Database (USA)

-> American Homeowners

 

[ PROFESSIONALS LISTS ]

$112 each (Expires Friday)

 

-> USA Lawyers Database

-> Criminal Attorneys in the US

 

 

Reply to this address for details and samples: marketing-lists11@gmx.com

 

If the email address above doesn't work, please call 206-426-0326 instead.

 

Send email to undo@gmx.com for deleted status

© 1977, Strangely Perfect.