Wednesday 31 January 2018

Pauley Perrette Scam 2: Crappy Edition

This is Pink Diamond's version of the Pauley Perrette scam. There are a lot of differences between this one and Essence of Argan's (besides the name of the product, of course); these include crappy formatting, bad grammar, and improperly-stretched images. The team at Pink Diamond appears to be really bad at basic HTML; this version looks half-assed compared to Argan's. The red flags are the same: "free trial" links, made-up results, and fake comments. Once again, stay away from Pink Diamond.

Sunday 21 January 2018

Meghan Markle Scam Part 2: New Layout, Same Scam

This is a slightly different version of the Meghan Markle scam. There are multiple differences from the earlier version:

  • It doesn't pretend to be People Magazine, and instead uses a variation of the "Entertainment Today" layout.
  • The fake news story itself is based on the Kate Middleton scam instead of the Joanna Gaines scam.
  • Instead of Creme or Pink Diamond, it advertises a different product called "Derm Naturale Skin Care".
  • The fake results are replaced with additional fake celebrity endorsements.
  • There are fake comments copy-pasted from the Kate Middleton scam.
The other red flags are the same; no real news outlet would provide "free trial" offers and it's still basically the same old. Do not buy Derm Naturale, and don't believe everything you read on the Internet.

EDIT: They changed it to advertise Pink Diamond. Still the same old.

Saturday 20 January 2018

Meghan Markle Fake News Farm (Creme/Pink Diamond): IPWHOIS Info

This is some info related to the newest CHK/Creme/Pink Diamond fake news farm: the Meghan Markle scam. They are trying to capitalize off the upcoming Royal Wedding using a fake People Magazine article. The domain WHOIS isn't accurate, so I used an IP-lookup tool on the "checkout" subdomains (used to store the fake news itself) and then used an IPWHOIS tool on the resulting IP addresses.

theterraingym.com:

inetnum         94.23.179.0 - 94.23.179.127
netname         OVH_58178988
descr           OVH
country         IE
org             ORG-AG110-RIPE
admin-c         OTC9-RIPE
tech-c          OTC9-RIPE
status          ASSIGNED PA
mnt-by          OVH-MNT
created         2014-03-27T23:06:07Z
last-modified   2014-03-27T23:06:07Z
source          RIPE

organisation    ORG-AG110-RIPE
org-name        Adboom Group
org-type        OTHER
address         750 B Street
address         San Diego, CA
mnt-ref         OVH-MNT
mnt-by          OVH-MNT
created         2014-03-21T18:34:58Z
last-modified   2017-10-30T16:27:33Z
source          RIPE # Filtered

role            OVH IE Technical Contact
address         OVH Hosting Limited
address         5 Fitzwilliam Place
address         Dublin 2
address         Ireland
admin-c         OK217-RIPE
tech-c          GM84-RIPE
nic-hdl         OTC9-RIPE
abuse-mailbox   abuse@ovh.net
mnt-by          OVH-MNT
created         2009-09-16T15:41:10Z
last-modified   2009-09-16T15:41:10Z
source          RIPE # Filtered

route           94.23.0.0/16
descr           OVH ISP
descr           Paris, France
origin          AS16276
mnt-by          OVH-MNT
created         2008-07-15T16:59:42Z
last-modified   2008-07-15T16:59:42Z
source          RIPE # Filtered

thefitbuzz.com:

inetnum         54.36.68.64 - 54.36.68.127
netname         OVH_150179966
country         FR
descr           Failover Ips
org             ORG-NE28-RIPE
admin-c         OTC2-RIPE
tech-c          OTC2-RIPE
status          LEGACY
mnt-by          OVH-MNT
created         2017-09-01T08:48:25Z
last-modified   2017-09-01T08:48:25Z
source          RIPE

organisation    ORG-NE28-RIPE
org-name        Nordyke Eric
org-type        OTHER
address         390 North Ave
address         15301 Houston
address         US
phone           +1.4122166063
mnt-ref         OVH-MNT
mnt-by          OVH-MNT
created         2016-06-29T07:16:03Z
last-modified   2017-10-30T16:50:51Z
source          RIPE # Filtered

role            OVH Technical Contact
address         OVH SAS
address         2 rue Kellermann
address         59100 Roubaix
address         France
admin-c         OK217-RIPE
tech-c          GM84-RIPE
tech-c          SL10162-RIPE
nic-hdl         OTC2-RIPE
abuse-mailbox   abuse@ovh.net
mnt-by          OVH-MNT
created         2004-01-28T17:42:29Z
last-modified   2014-09-05T10:47:15Z
source          RIPE # Filtered

route           54.36.0.0/16
origin          AS16276
mnt-by          OVH-MNT
created         2017-10-06T07:57:47Z
last-modified   2017-10-06T07:57:47Z
source          RIPE

themastermuscle.com:

inetnum         94.23.179.0 - 94.23.179.127
netname         OVH_58178988
descr           OVH
country         IE
org             ORG-AG110-RIPE
admin-c         OTC9-RIPE
tech-c          OTC9-RIPE
status          ASSIGNED PA
mnt-by          OVH-MNT
created         2014-03-27T23:06:07Z
last-modified   2014-03-27T23:06:07Z
source          RIPE

organisation    ORG-AG110-RIPE
org-name        Adboom Group
org-type        OTHER
address         750 B Street
address         San Diego, CA
mnt-ref         OVH-MNT
mnt-by          OVH-MNT
created         2014-03-21T18:34:58Z
last-modified   2017-10-30T16:27:33Z
source          RIPE # Filtered

role            OVH IE Technical Contact
address         OVH Hosting Limited
address         5 Fitzwilliam Place
address         Dublin 2
address         Ireland
admin-c         OK217-RIPE
tech-c          GM84-RIPE
nic-hdl         OTC9-RIPE
abuse-mailbox   abuse@ovh.net
mnt-by          OVH-MNT
created         2009-09-16T15:41:10Z
last-modified   2009-09-16T15:41:10Z
source          RIPE # Filtered

route           94.23.0.0/16
descr           OVH ISP
descr           Paris, France
origin          AS16276
mnt-by          OVH-MNT
created         2008-07-15T16:59:42Z
last-modified   2008-07-15T16:59:42Z

source          RIPE # Filtered

As you can see, the scammers are using OVH, a cloud hosting company that doesn't have write access to their own cloud servers, to store their fake news articles.


Friday 19 January 2018

"Pink Diamond" is the SAME SCAM as Creme

Creme has changed their name to "Pink Diamond", and have updated their fake news articles to reflect this. It's still the same scam, of course; the same URLs are even used for the fake news sites! Do not buy Pink Diamond; same old scam is same old.

Tuesday 16 January 2018

Vanna White has NOT been fired from Wheel of Fortune (at this point, I wouldn't be surprised if the scams are spreading malware)

This is a fake news story from a new challenger called "Ziladerm Anti-Aging Complex". This time, it's a fake People Magazine article pretending that Vanna White was fired from Wheel of Fortune (which, of course, will never happen; even after she dies, they will just remake her in CGI, synthesize her voice, and get a holographic projector) because she created Ziladerm (obviously not true). The red flags are the same; the fake results, the fake comment section, the "free trial" offer, and the fact that THE REAL PEOPLE MAGAZINE WOULD NOT SHILL A SKIN CREAM LIKE THIS. At this point, I probably wouldn't be surprised if I loaded a scam fake news article on Windows, closed the browser, opened up an anti-malware program, and ran a scan, and then it detected 200 trojans, 300 adware programs, and 150 PUPs.

Friday 12 January 2018

Examples of Dyslexia from CHK/Creme Google Ads

Here is proof that someone at CHK/Creme has problems with spelling and grammar. Specific mistakes are highlighted in bold.
  • "Nobody ever thought this is would be the end." - Sally Field scam ad linking to thegoldensole(dot)com
  • "SaIIey FieId Iast Words - She WiII Be Remembered" - same ad as above (these are actually uppercase "i"'s instead of lowercase "L"'s; also, it's "Sally", not "Salley")
  • "Princess MarkIe Leaves KIngdom - She WiII Be Missed" - Meghan Markle scam ad linking to theterraingym(dot)com (uppercase "i"/lowercase "L" dyslexia combined with uppercase/lowercase "I" dyslexia)
  • "Friends TV Star'd Hidden Life - Jennifer Aniston's Empire" - Jennifer Aniston scam ad linking to persuasivesalonandspas(dot)com (probably a simple typo, but could still be dyslexia)
  • "We Are HeartbrokenTo Hear This About Her" - same ad as above (again, may be typo and/or dyslexia)
  • "Jen Anniston FinaI Words - She WiII Be Missed" - Jennifer Aniston scam ad linking to thefoodhavens(dot)com (misspelled last name combined with uppercase "i"/lowercase "L" dyslexia)
  • "RaceI-Ray Gone For Good - Prayers Are Needed" -  Rachael Ray scam ad linking to kinkykurlssalon(dot)com (I already pointed out how sick this is, but the missing "ha", uppercase "i"/lowercase "L" dyslexia, and space/hyphen-minus dyslexia makes it even more cringey)

Thursday 11 January 2018

Proof that a single person is behind almost all of my most hated scams


  • When the Sidney Crosby fake news farm was making way for the Kate Middleton fake news farm, I saw one Kate Middleton site using the Sidney Crosby farm's custom CMS instead of the Kate Middleton farm's usual combination of Wordpress, a "checkout" subdomain, and a redirect trick.
  • The Kate Middleton guys later made more scams; they are listed on my Wikiversity fake news study as "CHK".
  • CHK disappeared in mid-November 2017, but later came back in January 2018 to shill a skin care product called Creme Anti-Aging Moisturizer  They are hiding the redirect using complicated IFrames, but the archive.is loading page still lists "checkout" subdomains if you put one of their scam pages in the URL box and hit "enter", revealing their trick. Also, they're using the same stock images in the ads as they did before.
  • Finally, I recently saw one of the fake CBC site's "Canada is Doomed" ads using one of CHK/Creme's favourite stock images.
You just got busted, kid. Give up now.

Wednesday 10 January 2018

To Creme: STOP TRYING, YOU IDIOTS.

Seriously Creme, STOP IT WITH THE FAKE NEWS. Nobody will fall for it, and the bills (Amazon+Namecheap+OVH+Adsense) will probably end up costing more than you guys can afford. I'm actually getting pissed at you guys, and I cringe every time I see one of your fake news ads. I wish you guys would get actual lives and get out of the Creme affiliate marketing program; it would make you much better people.

Dear Creme, PLEASE STOP TRYING. Meghan Markle has nothing to do with you, either.

This is another fake news story by Creme. This time, they're pretending to be People Magazine and are claiming that they were created by future Royal Family member Meghan Markle. The red flags are the same old: the comments don't work, the real People Magazine wouldn't link to "free trial" offers, and the results are fake. Again, they misspelled her name in the ad ("Princess Markie").
Creme is actually wasting money on this. (Google Adsense bills x how many adverts they're running) + (Amazon cloud bills) + (OVH web hosting bills x how many sites they have) + (Namecheap domain registration bills x how many domains they have) = a lot of CA$ owed to Google, Amazon, OVH, and Namecheap. Nobody will ever fall for the fake news, of course, so nobody will ever sign up for their fake "free" trial and get billed eight hundred dollars a month; this means they won't be able to pay for all of the fake news for very long.

Someone at Creme is REALLY sick and messed up

This is even more BS from Creme. This time, they pretend that Rachael Ray resigned from her talk show to sell Creme, which she supposedly (wait for it) created. The red flags are the same: the "Entertainment Today" layout, fake endorsements from other celebrities, fake results, free trial offers, and fake comments. That's not the bad part, though. The bad part is the associated Google Ad:
Whichever sicko thought this ad up needs to be fired from Creme. (They also made similar ads for their Sally Field and Jennifer Aniston scams, complete with misspellings "Saiiy Fieid" and "Jen Anniston".)

Tuesday 9 January 2018

Jennifer Aniston Did NOT Create Creme

This is more BS from Creme. This time, they pretend that Jennifer Aniston created it. The red flags are the same old stuff: the "Entertainment Today" layout, the fake results, the free trial offers, and the fake comments. Stay away from Creme, and don't believe everything you read on the Internet.

Nice try, Creme. Kate Middleton does not have a "Secret $5 Skincare Empire". I hope a Royal lawyer will be seeing you guys in a British court.

This is why Hannah Vu needs to get a life. Seriously? You brought back the Kate Middleton scam, which was MY MOST HATED SCAM EVER?! I'm too angry to explain why this is BS, so I'll let this ScamDetector post explain. The only difference between the one debunked by ScamDetector and the newer one is that the newer one is part of the Creme skin care scam. SERIOUSLY, CREME, TAKE YOUR FAKE NEWS AND SHOVE IT. Here's Hannah's email address, for all the spambots out there: vbosio@yahoo.com

Ayesha Curry did NOT create Creme Anti Aging - Fake People Magazine Website EXPOSED

This is a weird one. It's a scam fake news story involving a athlete, but it's not part of the Fake ESPN muscle-building scam family. It instead pretends to be People Magazine, and claims that Steph Curry's wife, Ayesha, is having a domestic dispute involving (wait for it) a skin care line that she supposedly created called "Creme Anti Aging". This is BS; the results are copy-pasted from the ancient (by Internet standards) Joanna Gaines scam, and the "comment section", while surprisingly not containing any fake comments from satisfied consumers, doesn't actually work. Stay away from Creme Anti Aging, and don't believe everything you read on the Internet.

Monday 8 January 2018

Goldie Hawn has NOTHING to do with Bonte

This is another scam from the Bonte folks. This time, it pretends that Goldie Hawn created Bonte. This is BS, and it's just the Sally Field scam with less italics, a different header image, and "Sally Field" search-and-replaced by "Goldie Hawn", so the red flags (the "Entertainment Today" layout, the constant repetition of "Bonte Wrinkle Cream with Eye Cream", the free trial, and the fake comments) are the same. This scam is particularly lazy, being a simple search-and-replace job. There's no way anyone would fall for this.

Friday 5 January 2018

Sally Field Scam Part 2: Creme-tastic Boogaloo

This is another example of variations: it's the same fake news story detailed in our first post, but with two differences:

  1. The italics problem has been fixed
  2. The product advertised is called "Creme Anti-Aging Moisturizer"
The red flags are the same: the free trial, the fake comments, the amount of times "Creme Anti-Aging Moisturizer" is repeated, and the fact that all the links go to the order page. Once again, don't believe everything on the Internet.

Thursday 4 January 2018

More Fun with Layouts - Fake Yahoo News Site

This is a weird hybrid; the layout is from the "Cornell University Student" weight loss scam, but the CNN logo is replaced with a Yahoo logo and the fake news story is mostly copy-pasted from the Ashleigh Williams scam. Starex Labs Garcinia is once again the product being advertised.  There are still all the red flags - the comments are fake, the real Yahoo site would never provide "free trials", and this doesn't even look like the real Yahoo site. Scams like this must be stopped.

The Zuckerbergs didn't create Essence of Argan, either

This is another fake news story from Essence of Argan. It's the same as this earlier example, but the links and the name of the product are changed. This is a common tactic; after one version of a scam fake news story is debunked, they simply change the product being advertised and hope that nobody will see through it.
There are many other minor variations on scams. In more recent versions of the "Cornell University Student" weight-loss scam, they change the logo at the top of the page from the trademark of CNN to a graphic representing a fictional publication like "Viral Nutrition" or "Best Diets", presumably to prevent the lawyers for Time Warner and Turner Broadcasting from suing them.
There are many versions of a scam which advertises weight-loss pills, skin care products, or muscle supplements; some pretend that they were on Dragon's Den, but others pretend that they were on Shark Tank (a similar show that airs in the USA). This scam has many web design layouts, from the generic favourite "Entertainment Today" layout, to blatant copyright infringement of a circa-2015 version of the Fox News website's layout, to a version of the Entertainment Today layout with a header stolen from the current layout of the Fox News site.
And, of course, there was that muscle-supplement advertiser that ran a bunch of fake ESPN sites and used famous athletes' names without permission; they just changed the name of the athlete every few months. (They've been long gone now; they turned to skin care scams in late August 2017 and ended the fake ESPN campaign in early September before disappearing completely in mid-November, but have tried [and failed] to make a few comebacks since then.)
Scams must be stopped. Take action and ORGANIZE!

There Is NO Kelly Clarkson "Weight Loss Pill Scandal" - Fake Shape Magazine Website EXPOSED

This is a fake news site pretending to be Shape Magazine. (They aren't even trying; they used a variation of the "Entertainment Today" layout instead of copying the actual Shape website's layout.) Ir pretends that Kelly Clarkson got fired by Warner Music because she used a diet pill called "Nature's Slim". (More like Nature's SHITE, amirite?)
This is obviously bullshit, and none of the other celebrities mentioned in the article use it, either. There are a lot of red flags, including the fake comments and the fact that all the links go to the Nature's Slim order page. Stay away from any product advertised using fake news.

Fake CBC Site run by Rogue Affiliate EXPOSED

This is more fake news from a rogue Casino Rewards affiliate. It pretends to be the CBC News site, and says that one of CR's online casinos has a hidden loophole that allows you to make money fast. This is not true. There are many red flags; the comments are fake and the real CBC site would not shill an online casino like this. BOYCOTT CASINO REWARDS until the rogue affiliate is removed.

Wednesday 3 January 2018

BioDermRX was NEVER on Shark Tank - Fake Fox News Site EXPOSED

This is more fake news from BioDermRX. It's the same as the Dragon's Den scam except for a few things:

  • It pretends that they were on Shark Tank (an American show) instead of Dragon's Den
  • It pretends to be the Fox News website
  • There are added grammar errors
There are a lot of red flags; the real Fox News site would never provide "free trials", all the links go to the BioDermRX ordering page, and the comments are fake. Stay away from BioDermRX, and don't believe everything you read on the Internet.