Results 1 to 10 of 10
Like Tree1Likes
  • 1 Post By scratchycat

Thread: Profit From Home Academy Scam/Spam

  1. #1
    JustTooMuchTime is offline Senior Scambuster
    Join Date
    Jul 2010
    Posts
    761
    Blog Entries
    58

    Profit From Home Academy Scam/Spam

    Got spammed with Profit From Home Academy the other day from somebody who had their account hacked. Looks like the countries involved are Ukraine, China, and Georgia. I've seen credit card theft rings from the countries that set up fake bizopp sites. I didn't catch anything like that with this one so far, but I'm still looking into it.

    It's the usual bizopp scam-sales page used for boiler-room lead generation.


    The site spammed to my email is hosted in Georgia (the country).


    That site redirected to a fake news site which triggered an intrusion alert attempt from Norton...


    The Profit-From-Home-Academy.com site ICANN registrar is the CENTER OF UKRAINIAN INTERNET NAMES


    The Profit From Home Academy is listed with a fake U.S. address. The email address is associated with numerous other questionable sites (more on that later).


    privacy protection for profit-from-home-academy.com's nameserver (webnsweb.com) is listed as being from China.


    Profit-From-Home-Academy.com is using the site securely-checkout-now.com for its order page:


    securely-checkout-now.com uses the same nameserver as profit-from-home-academy.com:


    securely-checkout-now.com also moves through IPs from 3 different countries - German, Russia, & the Netherlands in under 30 days.
    Last edited by JustTooMuchTime; 04-13-2013 at 04:09 PM.

  2. #2
    JustTooMuchTime is offline Senior Scambuster
    Join Date
    Jul 2010
    Posts
    761
    Blog Entries
    58

    Re: Profit From Home Academy Scam/Spam

    Forgot to post the IPs associated with securely-checkout-now.com above. Here they are along with the country movement:



  3. #3
    JustTooMuchTime is offline Senior Scambuster
    Join Date
    Jul 2010
    Posts
    761
    Blog Entries
    58

    Re: Profit From Home Academy Scam/Spam

    The majority of the following sites hosted on IP 94.62.14.20 all use the same email address - edwardjohnson1908734@ymail.com - as profit-from-home-academy.com

    I would assume many of the sites in the list are dangerous to visit.

    12fxnws.com
    12newcoffee.com
    12nwspure.com
    24foxnws.com
    5newsfx.com
    alertsfox.com
    attsnews.com
    berry-slim.com
    berrydopbuy.com
    berrygocce.com
    berrygreats.com
    berryraspfast.com
    berrysuperslim.com
    berrytopdrops.com
    berrytrusts.com
    berrytryrasp.com
    berryultrasale.com
    bigdietdrops.com
    buyberrydiet.com
    buyrasp-berry.com
    c-foxnws.com
    coffeedietpure.com
    coffeediets.com
    coffeenws.com
    diet-berryrasp.com
    dietasottile.com
    dietberryplus.com
    dietingrasp.com
    dietrasps.com
    drdropper.com
    drdrops.com
    dropslimberry.com
    e-berryrasp.com
    e-nwsfox.com
    edrberry.com
    ee-fxnws.com
    efxblue.com
    enwsfx.com
    enwsgar.com
    eraspdrops.com
    eslimsplant.com
    ex-fxnws.com
    ezrasp.com
    fastrasp.com
    findnws.com
    finenws.com
    fixxnws.com
    flashnws.com
    foxnws12.com
    foxnws24.com
    foxroll.com
    foxsops.com
    foxtop5.com
    foxxtime.com
    foxynws.com
    freshdropdiet.com
    fruttigocce.com
    fx-plus.com
    fxnws24.com
    fxnwsnow.com
    fxonenws.com
    fxs5nws.com
    fxsenws.com
    fxsnewer.com
    fxsnwss.com
    fxxmax.com
    fxxsnws.com
    garcidiet.com
    garciniabuys.com
    garciniashop.com
    gazzettafx.com
    giornonotizie.com
    goccedibosco.com
    gonewsfx.com
    greatberryrasp.com
    greatdropsberry.com
    greenhotcoffee.com
    hurryberryrasp.com
    i-raspberrys.com
    junofx.com
    levelfxs.com
    luxurytimers.com
    mannyberrys.com
    maxraspberry.com
    mustraspberry.com
    mxsfox.com
    myberrytrim.com
    myfoxs.com
    mynws-fox.com
    myraspberrys.com
    myslimberrys.com
    newberrysell.com
    news5rep.com
    newsfixs.com
    notiziedieta.com
    nuovafox.com
    nws-alert.com
    nws12rasp.com
    nwsefx.com
    nwsyear.com
    nyfoxnws.com
    onefxs.com
    onesfxs.com
    onlinefxs.com
    onlynws.com
    raspberryjem.com
    raspbongberry.com
    raspbuysberry.com
    raspdropdiet.com
    raspfastberry.com
    raspketonediet.com
    rasplossberry.com
    raspproberry.com
    raspseller.com
    raspslimberry.com
    raspsnewberry.com
    rasptheberry.com
    raspwowberry.com
    roxfxs.com
    sellergarcinia.com
    sfx-news.com
    shopdietberry.com
    slimberrysuper.com
    slimdietgarcinia.com
    stopfxs.com
    storeberrydiet.com
    storyfx.com
    supplyberry.com
    therasp.com
    thinedberry.com
    thingarcinia.com
    thinmeberry.com
    timerfox.com
    todayfxs.com
    tofoxnws.com
    tofxs.com
    topdietrasp.com
    topfoxnws.com
    trimberrys.com
    ultrarasp.com
    unofxnws.com
    veryberrydiet.com
    weightloss-berry.com
    woahdrop.com
    wonberrydiet.com
    worldfxs.com
    worldnws12.com
    wowfxs.com
    yearfox.com
    yearsnws.com
    younws.com
    yourberrys.com
    zoneberrys.com

  4. #4
    JustTooMuchTime is offline Senior Scambuster
    Join Date
    Jul 2010
    Posts
    761
    Blog Entries
    58

    Re: Profit From Home Academy Scam/Spam

    2 more email addresses (in addition to edwardjohnson1908734@ymail.com) are associated with some of the domains on IP 94.62.14.20



    It looks like the total number of connected domains so far here is 4167

  5. #5
    JustTooMuchTime is offline Senior Scambuster
    Join Date
    Jul 2010
    Posts
    761
    Blog Entries
    58

    Re: Profit From Home Academy Scam/Spam

    Another name - Victor Petrenko at altsrv@gmail.com has popped up with connections to hundreds of more domains:
    VladislavPetrenko_zps188a915d.png Photo by Paul_Schlegel | Photobucket

  6. #6
    JustTooMuchTime is offline Senior Scambuster
    Join Date
    Jul 2010
    Posts
    761
    Blog Entries
    58

    Re: Profit From Home Academy Scam/Spam

    Quote Originally Posted by JustTooMuchTime View Post
    Another name - Victor Petrenko at altsrv@gmail.com has popped up with connections to hundreds of more domains:
    Fixing the embed:


  7. #7
    JustTooMuchTime is offline Senior Scambuster
    Join Date
    Jul 2010
    Posts
    761
    Blog Entries
    58

    Re: Profit From Home Academy Scam/Spam

    The altsrv@gmail.com has led to another name being used - Olga Golubeva - and another email address being used - o.golubewa2013@yanex.ru - and about 5,000 additional domains...




  8. #8
    JustTooMuchTime is offline Senior Scambuster
    Join Date
    Jul 2010
    Posts
    761
    Blog Entries
    58

    Re: Profit From Home Academy Scam/Spam

    The Arthor Brown email address mentioned earlier - arthor-brown289289@gmail.com - leads to another email address zenghai@hotmail.com and domains using the name zeng hai


  9. #9
    scratchycat's Avatar
    scratchycat is offline Elite Scambuster
    Join Date
    Feb 2011
    Posts
    3,410
    Blog Entries
    2

    Re: Profit From Home Academy Scam/Spam

    Some good research you have done on these articles, JTM!! With all those domains they can fill half the internet with bugs.
    Don't get ripped off!! Stay informed!

  10. #10
    JustTooMuchTime is offline Senior Scambuster
    Join Date
    Jul 2010
    Posts
    761
    Blog Entries
    58

    Re: Profit From Home Academy Scam/Spam

    And the Profit-From-Home-Academy.com website is officially gone...


Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Tags for this Thread

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Disclaimer: Opinions expressed on this website are solely those of their respective authors.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37