JustTooMuchTime
06-14-2013, 06:09 AM
Blackhatters are promoting a site called Michelle Johnson Home Income - or just "Home Income" on Adwords. In other words, they're tricking Google into running their ads. Oh, and I believe this is part of a big spam and scam ring, too. Nice going Google!
Here's the sequence:
1. The Adwords Ad:
http://i1242.photobucket.com/albums/gg536/Paul_Schlegel/Spam%20And%20Scam%20Rings/home_income_univ/HUV001_zps78fd5f40.png (http://s1242.photobucket.com/user/Paul_Schlegel/media/Spam%20And%20Scam%20Rings/home_income_univ/HUV001_zps78fd5f40.png.html)
(Note: I don't think the owner of ownbusinessfromhome.net is involved in this or even knows the domain is being used. The scammers are most likely running that domain for a while to boost their quality score, avoid manual review, until they can safely switch the actual target to their scam URL).
2. Clicking on the adwords ad takes you to...
http://i1242.photobucket.com/albums/gg536/Paul_Schlegel/HUV002-Fake-News_zps4ce67583.png (http://s1242.photobucket.com/user/Paul_Schlegel/media/HUV002-Fake-News_zps4ce67583.png.html)
...where you meet the fine and honorable scammy fake news site "Finance Reports" (You're source for smarter living!). :RpS_wink:
You're also treated to one of the new scammers' favorite web attacks:
http://i1242.photobucket.com/albums/gg536/Paul_Schlegel/Spam%20And%20Scam%20Rings/home_income_univ/HUV003_zps3dcc5b91.png (http://s1242.photobucket.com/user/Paul_Schlegel/media/Spam%20And%20Scam%20Rings/home_income_univ/HUV003_zps3dcc5b91.png.html)
3. At Finance Reports we learn about Therese Andrews who like many other fake work at home success stores "basically makes $6,000 - $8,000 a month".
http://i1242.photobucket.com/albums/gg536/Paul_Schlegel/Spam%20And%20Scam%20Rings/home_income_univ/HUV004_zpse3ec9c17.png (http://s1242.photobucket.com/user/Paul_Schlegel/media/Spam%20And%20Scam%20Rings/home_income_univ/HUV004_zpse3ec9c17.png.html)
We also learn about the uniquely branded program known simply as "Home Income".
And we meet the fine gentleman behind the spamming, blackhatting Theresa Andrews fake news site...Igor Kikenin of Ukraine.
http://i1242.photobucket.com/albums/gg536/Paul_Schlegel/Spam%20And%20Scam%20Rings/home_income_univ/HUV002-Fake-News-WHOIS_zps8ab928d7.png (http://s1242.photobucket.com/user/Paul_Schlegel/media/Spam%20And%20Scam%20Rings/home_income_univ/HUV002-Fake-News-WHOIS_zps8ab928d7.png.html)
4. I'm pretty sure the whole thing is real, because we're shown a fake check made out to the fake person, Theresa Andrews:
http://i1242.photobucket.com/albums/gg536/Paul_Schlegel/Spam%20And%20Scam%20Rings/home_income_univ/HUV005_zps50a7c98b.png (http://s1242.photobucket.com/user/Paul_Schlegel/media/Spam%20And%20Scam%20Rings/home_income_univ/HUV005_zps50a7c98b.png.html)
Although, it's kind of hard to read, so I guess it could say just about anything - "Thorny Arbors"?
4. Clicking on the "Home Income" links on the Financial Reports fake news sites takes you to home-income-univ.com, or more uniquely known as "Home Income" where we are told for no particular reason that "work at home opportunities have been featured on the following news sites:
Fox News
USAToday
NBC News
abc
CNN
http://i1242.photobucket.com/albums/gg536/Paul_Schlegel/Spam%20And%20Scam%20Rings/home_income_univ/HUV006_zpsafd1ad2d.png (http://s1242.photobucket.com/user/Paul_Schlegel/media/Spam%20And%20Scam%20Rings/home_income_univ/HUV006_zpsafd1ad2d.png.html)
5. I signed up for more scams and spam on the Home Income optin page and then was congratulated by another page which told me there were 2 positions left in my area. Not 1. Not 3...But TWO positions left in my area. Michelle Johnson is so popular!
http://i1242.photobucket.com/albums/gg536/Paul_Schlegel/Spam%20And%20Scam%20Rings/home_income_univ/HUV007_zpsa345c4a9.png (http://s1242.photobucket.com/user/Paul_Schlegel/media/Spam%20And%20Scam%20Rings/home_income_univ/HUV007_zpsa345c4a9.png.html)
6. By the way, the home-income-univ.com shows the site registered to Edward Johnson, which is "definitely" a real person who totally lives in Los Angeles and decided to register his domain from the Center Of Ukrainian Internet Names:
http://i1242.photobucket.com/albums/gg536/Paul_Schlegel/Spam%20And%20Scam%20Rings/home_income_univ/HUV009-Whois-Showing-Where-Registered_zpsedf4defd.png (http://s1242.photobucket.com/user/Paul_Schlegel/media/Spam%20And%20Scam%20Rings/home_income_univ/HUV009-Whois-Showing-Where-Registered_zpsedf4defd.png.html)
7. I wouldn't worry about all of that though, because if you have any sort of problem with the Michelle Johnson work at home site, you just have to contact "admin":
http://i1242.photobucket.com/albums/gg536/Paul_Schlegel/Spam%20And%20Scam%20Rings/home_income_univ/HUV008-Service-Contact-Admin_zps1b9b072d.png (http://s1242.photobucket.com/user/Paul_Schlegel/media/Spam%20And%20Scam%20Rings/home_income_univ/HUV008-Service-Contact-Admin_zps1b9b072d.png.html)
8. Plus, the whole thing is only $97 according to the order page:
http://i1242.photobucket.com/albums/gg536/Paul_Schlegel/Spam%20And%20Scam%20Rings/home_income_univ/HUV0011-Order-Page_zps177c34b3.png (http://s1242.photobucket.com/user/Paul_Schlegel/media/Spam%20And%20Scam%20Rings/home_income_univ/HUV0011-Order-Page_zps177c34b3.png.html)
9. Although there are some hidden charges deep in the terms page, which you can't possibly miss if you spend a while hunting around for them:
http://i1242.photobucket.com/albums/gg536/Paul_Schlegel/Spam%20And%20Scam%20Rings/home_income_univ/HUV0010-HiddenFees_zps46850915.png (http://s1242.photobucket.com/user/Paul_Schlegel/media/Spam%20And%20Scam%20Rings/home_income_univ/HUV0010-HiddenFees_zps46850915.png.html)
You'll be billed $9.95 every 32 days. Not 31. Not 33...but every THIRTY TWO days.
Nothing to worry about, though, as you can always contact...
..."admin".
Here's the sequence:
1. The Adwords Ad:
http://i1242.photobucket.com/albums/gg536/Paul_Schlegel/Spam%20And%20Scam%20Rings/home_income_univ/HUV001_zps78fd5f40.png (http://s1242.photobucket.com/user/Paul_Schlegel/media/Spam%20And%20Scam%20Rings/home_income_univ/HUV001_zps78fd5f40.png.html)
(Note: I don't think the owner of ownbusinessfromhome.net is involved in this or even knows the domain is being used. The scammers are most likely running that domain for a while to boost their quality score, avoid manual review, until they can safely switch the actual target to their scam URL).
2. Clicking on the adwords ad takes you to...
http://i1242.photobucket.com/albums/gg536/Paul_Schlegel/HUV002-Fake-News_zps4ce67583.png (http://s1242.photobucket.com/user/Paul_Schlegel/media/HUV002-Fake-News_zps4ce67583.png.html)
...where you meet the fine and honorable scammy fake news site "Finance Reports" (You're source for smarter living!). :RpS_wink:
You're also treated to one of the new scammers' favorite web attacks:
http://i1242.photobucket.com/albums/gg536/Paul_Schlegel/Spam%20And%20Scam%20Rings/home_income_univ/HUV003_zps3dcc5b91.png (http://s1242.photobucket.com/user/Paul_Schlegel/media/Spam%20And%20Scam%20Rings/home_income_univ/HUV003_zps3dcc5b91.png.html)
3. At Finance Reports we learn about Therese Andrews who like many other fake work at home success stores "basically makes $6,000 - $8,000 a month".
http://i1242.photobucket.com/albums/gg536/Paul_Schlegel/Spam%20And%20Scam%20Rings/home_income_univ/HUV004_zpse3ec9c17.png (http://s1242.photobucket.com/user/Paul_Schlegel/media/Spam%20And%20Scam%20Rings/home_income_univ/HUV004_zpse3ec9c17.png.html)
We also learn about the uniquely branded program known simply as "Home Income".
And we meet the fine gentleman behind the spamming, blackhatting Theresa Andrews fake news site...Igor Kikenin of Ukraine.
http://i1242.photobucket.com/albums/gg536/Paul_Schlegel/Spam%20And%20Scam%20Rings/home_income_univ/HUV002-Fake-News-WHOIS_zps8ab928d7.png (http://s1242.photobucket.com/user/Paul_Schlegel/media/Spam%20And%20Scam%20Rings/home_income_univ/HUV002-Fake-News-WHOIS_zps8ab928d7.png.html)
4. I'm pretty sure the whole thing is real, because we're shown a fake check made out to the fake person, Theresa Andrews:
http://i1242.photobucket.com/albums/gg536/Paul_Schlegel/Spam%20And%20Scam%20Rings/home_income_univ/HUV005_zps50a7c98b.png (http://s1242.photobucket.com/user/Paul_Schlegel/media/Spam%20And%20Scam%20Rings/home_income_univ/HUV005_zps50a7c98b.png.html)
Although, it's kind of hard to read, so I guess it could say just about anything - "Thorny Arbors"?
4. Clicking on the "Home Income" links on the Financial Reports fake news sites takes you to home-income-univ.com, or more uniquely known as "Home Income" where we are told for no particular reason that "work at home opportunities have been featured on the following news sites:
Fox News
USAToday
NBC News
abc
CNN
http://i1242.photobucket.com/albums/gg536/Paul_Schlegel/Spam%20And%20Scam%20Rings/home_income_univ/HUV006_zpsafd1ad2d.png (http://s1242.photobucket.com/user/Paul_Schlegel/media/Spam%20And%20Scam%20Rings/home_income_univ/HUV006_zpsafd1ad2d.png.html)
5. I signed up for more scams and spam on the Home Income optin page and then was congratulated by another page which told me there were 2 positions left in my area. Not 1. Not 3...But TWO positions left in my area. Michelle Johnson is so popular!
http://i1242.photobucket.com/albums/gg536/Paul_Schlegel/Spam%20And%20Scam%20Rings/home_income_univ/HUV007_zpsa345c4a9.png (http://s1242.photobucket.com/user/Paul_Schlegel/media/Spam%20And%20Scam%20Rings/home_income_univ/HUV007_zpsa345c4a9.png.html)
6. By the way, the home-income-univ.com shows the site registered to Edward Johnson, which is "definitely" a real person who totally lives in Los Angeles and decided to register his domain from the Center Of Ukrainian Internet Names:
http://i1242.photobucket.com/albums/gg536/Paul_Schlegel/Spam%20And%20Scam%20Rings/home_income_univ/HUV009-Whois-Showing-Where-Registered_zpsedf4defd.png (http://s1242.photobucket.com/user/Paul_Schlegel/media/Spam%20And%20Scam%20Rings/home_income_univ/HUV009-Whois-Showing-Where-Registered_zpsedf4defd.png.html)
7. I wouldn't worry about all of that though, because if you have any sort of problem with the Michelle Johnson work at home site, you just have to contact "admin":
http://i1242.photobucket.com/albums/gg536/Paul_Schlegel/Spam%20And%20Scam%20Rings/home_income_univ/HUV008-Service-Contact-Admin_zps1b9b072d.png (http://s1242.photobucket.com/user/Paul_Schlegel/media/Spam%20And%20Scam%20Rings/home_income_univ/HUV008-Service-Contact-Admin_zps1b9b072d.png.html)
8. Plus, the whole thing is only $97 according to the order page:
http://i1242.photobucket.com/albums/gg536/Paul_Schlegel/Spam%20And%20Scam%20Rings/home_income_univ/HUV0011-Order-Page_zps177c34b3.png (http://s1242.photobucket.com/user/Paul_Schlegel/media/Spam%20And%20Scam%20Rings/home_income_univ/HUV0011-Order-Page_zps177c34b3.png.html)
9. Although there are some hidden charges deep in the terms page, which you can't possibly miss if you spend a while hunting around for them:
http://i1242.photobucket.com/albums/gg536/Paul_Schlegel/Spam%20And%20Scam%20Rings/home_income_univ/HUV0010-HiddenFees_zps46850915.png (http://s1242.photobucket.com/user/Paul_Schlegel/media/Spam%20And%20Scam%20Rings/home_income_univ/HUV0010-HiddenFees_zps46850915.png.html)
You'll be billed $9.95 every 32 days. Not 31. Not 33...but every THIRTY TWO days.
Nothing to worry about, though, as you can always contact...
..."admin".