{"id":825,"date":"2011-01-27T13:22:43","date_gmt":"2011-01-27T04:22:43","guid":{"rendered":"http:\/\/www.joewein.net\/blog\/?p=825"},"modified":"2012-12-04T06:21:51","modified_gmt":"2012-12-03T21:21:51","slug":"fake-news-work-at-home-mom-job-scams","status":"publish","type":"post","link":"https:\/\/joewein.net\/blog\/2011\/01\/27\/fake-news-work-at-home-mom-job-scams\/","title":{"rendered":"Fake news \/ “work at home mom” job scams"},"content":{"rendered":"

During the last couple of weeks I have listed hundreds of domains that are part of an ongoing spam campaign advertising bogus “Work at home jobs”. The websites advertised by these spams were designed to look like they belong to commercial TV channels, sometimes illegally including the CNBC<\/a> logo and many of the domain names contain terms like “cnbc”, “nbc”, “abc” or “news”. <\/p>\n

Here is a sample screen shot:<\/p>\n


\n\"One
\n<\/a><\/p>\n

The fact that these people illegally use trademarks of major corporations should already be a major red flag. This is not just some dubious get-rich-quick scheme, is is the work of a criminal operation. The sites are hosted in different countries, including the US, Russia, China and Romania. The registrant details that can be looked up via WHOIS often only list a proxy service.<\/p>\n

Here is text from a typical site used in this scam:<\/p>\n

news8reports.com | Work At Home Mom Makes $6,498\/Month Part-Time<\/p>\n

Can $97 Really Turn Into $6795? We Investigated…
\nNews 8 Reports Investigates Online Work at Home Programs…<\/p>\n

Are There Any Legit Work At Home Programs?<\/p>\n

With unemployment numbers extremely high, everybody is looking to make a few extra bucks these days. Many people are turning to work at home programs… But, which ones are REAL and which ones are SCAMS?<\/p>\n

We just had to find out… So we set out to do some research ourselves. We came across a blog by Jessica Holmes of Tokyo, 40.\n<\/p><\/blockquote>\n

Oh, Tokyo? By sheer coincidence that’s where I live. But looking at the source of the website, I could see that the HTML code simply looks up the IP address from which the site is accessed and outputs the city associated with it. If you were reading the same article from an IP address in Baltimore it would say that “Jessica Holmes” lived in Baltimore!<\/p>\n

That little bit of cheating and the attempt to be mistaken for commercial TV channel websites are just the tip of the iceberg of this criminal scam. In an attempt to avoid being caught by spam filters, many of the spams abuse URL shortening services such as bit.ly or redi.ec to hide the domain names of the fake news sites that are getting blacklisted by us. Many of the spams appear to have been sent from hacked Hotmail, Gmail and AOL mail accounts. The spam appears designed to get unemployed people to pay $97 dollars upfront (“Can $97 Really Turn Into $6795?” headline on the fake site) in the hope of being able to support their families with whatever is offered, when they’re really only going to support the criminals who run this scam.<\/p>\n

Here are the WHOIS details of the above mentioned site:<\/p>\n

Registrant:
\n Domains by Proxy, Inc.
\n DomainsByProxy.com
\n 15111 N. Hayden Rd., Ste 160, PMB 353
\n Scottsdale, Arizona 85260
\n United States<\/p>\n

Registered through: GoDaddy.com, Inc. (http:\/\/www.godaddy.com)
\n Domain Name: NEWS8REPORTS.COM
\n Created on: 30-Jan-10
\n Expires on: 30-Jan-11
\n Last Updated on: 28-Sep-10<\/p>\n

Administrative Contact:
\n Private, Registration NEWS8REPORTS.COM@domainsbyproxy.com
\n Domains by Proxy, Inc.
\n DomainsByProxy.com
\n 15111 N. Hayden Rd., Ste 160, PMB 353
\n Scottsdale, Arizona 85260
\n United States
\n (480) 624-2599 Fax — (480) 624-2598<\/p>\n

Technical Contact:
\n Private, Registration NEWS8REPORTS.COM@domainsbyproxy.com
\n Domains by Proxy, Inc.
\n DomainsByProxy.com
\n 15111 N. Hayden Rd., Ste 160, PMB 353
\n Scottsdale, Arizona 85260
\n United States
\n (480) 624-2599 Fax — (480) 624-2598<\/p>\n

Domain servers in listed order:
\n NS1.WIREDTREE.COM
\n NS2.WIREDTREE.COM\n<\/p><\/blockquote>\n

Be extremely skeptical of any job offers that involve any of the following:<\/p>\n

    \n
  1. Anything sent as spam (unsolicited bulk email)<\/li>\n
  2. Work at home jobs that supposedly pay thousands of dollars a month that anybody can do<\/li>\n
  3. Upfront payments or purchases in order to get a job (in any real job the employer pays you, not vice versa!)<\/li>\n
  4. Hard sales tactics, such as web sites that pop up a dialog when you’re trying to close them<\/li>\n
  5. Signs of deception or hidden identities.<\/li>\n<\/ol>\n

    URL shortening abuse examples: <\/p>\n

    cnbcfinancenow21.tk = bit.ly\/cYANOE
    \ncnbc2.com = bit.ly\/cVE04V
    \ncnbc2.com = bit.ly\/9am423
    \ncnbc2.com = bit.ly\/9yLTQz
    \ncnbc2.com = bit.ly\/ajmIpO
    \ncnbc2.com = bit.ly\/dehCDk
    \nnbcnow28.tk = is.gd\/h1cqG
    \ncnbc2.com = bit.ly\/a7azZN
    \nnbcnow28.tk = is.gd\/h1cbJ
    \ncnbc2.com = bit.ly\/a81vu0
    \ncnbc2.com = bit.ly\/9fe1sd
    \ncnbc2.com = bit.ly\/aROkLP
    \ncnbc2.com = bit.ly\/aZSKYx
    \ncnbc2.com = bit.ly\/9DCGzQ
    \ncnbc2.com = bit.ly\/9avkAn
    \ncnbc2.com = bit.ly\/dcEmpU
    \ncnbc2.com = bit.ly\/9lXpMJ
    \nnbc40news.net = bit.ly\/bjI19K
    \nnbc39news.net = bit.ly\/alVIfU
    \nnbc40news.net = bit.ly\/cTHQ2Y
    \nnbc40news.net = bit.ly\/aYrKCa
    \nnbc40news.net = bit.ly\/dieJ5R
    \nnbc39news.net = bit.ly\/dbkWxV
    \nnbc40news.net = bit.ly\/9uOD6H
    \nnbc41news.net = bit.ly\/c7gCyu
    \nnbc41news.net = bit.ly\/gqRtBZ
    \nnbc41news.net = bit.ly\/f5VsQz
    \ncnbc14news.net = bit.ly\/fot9an
    \nnbc41news.net = bit.ly\/i0jOK2
    \nnbc41news.net = bit.ly\/gFJe8e
    \nnbc41news.net = bit.ly\/fgpSVG
    \nnbc7newsmedia.net = bit.ly\/9lBObh
    \ncnbc3news.net = bit.ly\/eGEYhq
    \ncnbc3news.net = bit.ly\/g2u93V
    \nmsnbcnews4.net = bit.ly\/fGupR0
    \nmsnbcnews4.net = bit.ly\/hq2gX3
    \nmsnbcnews4.net = bit.ly\/i8iYaK
    \nnbcnews7.net = bit.ly\/h0Kw5O
    \ncnbc3news8.com = bit.ly\/hnQyy7
    \ncnbc3.com = bit.ly\/hIxAuy
    \nmsnbcnews11.net = bit.ly\/i6CZN3
    \nmsnbcnews11.net = bit.ly\/fmRgsD
    \nnbcnews12.net = bit.ly\/gANdZw
    \nmsnbcnews11.net = bit.ly\/gadsv7
    \nmsnbcnews11.net = bit.ly\/hBXuRH
    \ncnbc7.com = bit.ly\/eUPW7N
    \ncnbc7.com = bit.ly\/edNttc
    \ncnbc7.com = bit.ly\/elDyof
    \ncnbc7.com = bit.ly\/fAe9oj
    \ncnbc7.com = bit.ly\/hg6Kvi
    \ncnbc7.org = bit.ly\/h6bTfo
    \ncnbc7.org = bit.ly\/gpuFHr
    \ncnbc7.org = bit.ly\/idIJoX
    \ncnbc7.org = bit.ly\/hOBmjw
    \ncnbc7.org = bit.ly\/gLbsrp
    \ncnbc7.org = bit.ly\/eq12aU
    \ncnbc7.com = bit.ly\/e43Iib
    \ncnbc7.org = bit.ly\/dPKBna
    \ncnbc7.org = bit.ly\/e10nTV
    \ncnbc7.com = bit.ly\/f5Z7rq
    \ncnbc7.org = bit.ly\/guMMYG
    \ncnbc7.com = bit.ly\/ez7AJF
    \ncnbc7.com = bit.ly\/grGu4j
    \ncnbc7.com = bit.ly\/gNwG4N
    \ncnbc7.com = bit.ly\/hdv9Xr
    \ncnbc7.com = bit.ly\/eMp8ce
    \ncnbc7.org = bit.ly\/hLrMSK
    \ncnbc7.org = bit.ly\/dKWCHA
    \ncnbc7.com = bit.ly\/eDe0ud
    \ncnbc7.com = bit.ly\/ft1H3q
    \ncnbc7.org = bit.ly\/fGPn0R
    \ncnbc7.org = idek.net\/3dtS
    \nnbcbeforehotmail.info = bit.ly\/gmv7PJ
    \nnbcbeforehotmail.info = bit.ly\/i5dFZm
    \nnbcbeforehotmail.info = bit.ly\/eQLUik
    \nnbcbeforehotmail.info = bit.ly\/hJnzSD
    \nnbcbeforehotmail.info = bit.ly\/fpBgps
    \nnbcbeforehotmail.info = bit.ly\/hYbl1G
    \nnbcbeforehotmail.info = bit.ly\/f75etY
    \nnbcbeforehotmail.info = bit.ly\/i0DGVt
    \nnbcbeforehotmail.info = bit.ly\/h1rrCw
    \nnbcbeforehotmail.info = bit.ly\/gEdAoY
    \nnbcbeforehotmail.info = bit.ly\/gm3Ti8
    \nnbcbeforehotmail.info = bit.ly\/ihbu2g
    \nnbcbeforehotmail.info = bit.ly\/hj7GKp
    \nnbcbeforehotmail.info = bit.ly\/gkbCcG
    \nnbcbeforehotmail.info = bit.ly\/e8RuVs
    \nnbcbeforehotmail.info = bit.ly\/hoVraB
    \nnbcbeforehotmail.info = bit.ly\/hFLA4Q
    \nnbcbeforehotmail.info = bit.ly\/h9lmA3
    \nnbcbeforehotmail.info = bit.ly\/f082ws
    \nnbcbeforehotmail.info = bit.ly\/gfhNP6
    \nnbcbeforehotmail.info = bit.ly\/emkJsL
    \nnbcbeforehotmail.info = bit.ly\/hoVraB
    \nnbcbeforehotmail.info = bit.ly\/hFLA4Q
    \nnbcbeforehotmail.info = bit.ly\/gfhNP6
    \nnbcbeforehotmail.info = bit.ly\/hoVraB
    \nnbcbeforehotmail.info = bit.ly\/gfhNP6
    \nbannewsnbc.info = bit.ly\/gysB7G
    \nnbcbeforehotmail.info = bit.ly\/hoVraB
    \nnbcbeforehotmail.info = bit.ly\/gfhNP6
    \nbannewsnbc.info = bit.ly\/gysB7G
    \ncnbc20medianet.com = bit.ly\/gfgAUo
    \nbannewsnbc.info = bit.ly\/g2xI9o
    \nbannewsnbc.info = bit.ly\/eL2oQx
    \nbannewsnbc.info = bit.ly\/hTX1Tr
    \nmsn7nbc.info = bit.ly\/eBVtbo
    \npolonbcnews.info = bit.ly\/fkXMia
    \nmsn7nbc.info = bit.ly\/hQDC2d
    \npolonbcnews.info = bit.ly\/fC0Gvj
    \nmsn7nbc.info = bit.ly\/fGAVTr
    \npolonbcnews.info = bit.ly\/fBGs29
    \nmsn7nbc.info = bit.ly\/eIgvhO
    \nmsn7nbc.info = bit.ly\/dFjrGX
    \nmsn7nbc.info = bit.ly\/dYIcw5
    \nmsn7nbc.info = bit.ly\/gn896l
    \nmsn7nbc.info = bit.ly\/er1dSj
    \nmsn7nbc.info = bit.ly\/g61R4u
    \nnews42local.info = is.gd\/gMaJL
    \nultranews23.com = tiny.cc\/UltraYjlSnews23
    \nultranews23.com = tiny.cc\/Ultra0Delnews23
    \nnewsfamily7.com = a.nf\/2tmNJV
    \nultranews23.com = tiny.cc\/Ultra6sPYnews23
    \nnewsfamily7.com = a.nf\/2tmNJV
    \nnews42local.net = is.gd\/gMtdl
    \nultranews23.com = tiny.cc\/UltradmSJnews23
    \nultranews23.com = tiny.cc\/UltraMfIanews23
    \nultranews23.com = tiny.cc\/UltrameYanews23
    \nnews42local.net = bit.ly\/ctBb1V
    \nnews42local.info = bit.ly\/d1MSVM
    \nnews42local.co.uk = is.gd\/gNatd
    \nultranews23.com = tiny.cc\/UltratIfOnews23
    \nultranews23.com = tiny.cc\/UltrabS2znews23
    \nnews42local.co.uk = is.gd\/gNiZ6
    \nnews42local.co.uk = is.gd\/gNrYT
    \nnews42local.co.uk = bit.ly\/bw7lIF
    \nnews42local.co.uk = is.gd\/gNuTt
    \nnews42local.net = bit.ly\/a7lyX5
    \nultranews23.com = tiny.cc\/UltraOqI9news23
    \nultranews23.com = tiny.cc\/UltraJ5s7news23
    \nultranews23.com = tiny.cc\/UltrameYanews23
    \nultranews23.com = tiny.cc\/UltrakP48news23
    \nnews42local.biz = bit.ly\/9CZnHc
    \nnews42local.net = bit.ly\/9o9F07
    \nnews42local.net = bit.ly\/b4VA1w
    \nnews42local.co.uk = is.gd\/gNF4a
    \nnews42local.co.uk = bit.ly\/aqgrW8
    \nnews42local.net = bit.ly\/cvFRT2
    \nultranews23.com = tiny.cc\/UltraMfIanews23
    \nultranews23.com = tiny.cc\/UltraCWiRnews23
    \nultranews23.com = tiny.cc\/Ultrap5RVnews23
    \nultranews23.com = tiny.cc\/UltratbGGnews23
    \nultranews23.com = tiny.cc\/Ultran79Unews23
    \nnews42local.co.uk = is.gd\/gNMW5
    \nnewsfornow1.net = is.gd\/gMuAg
    \nnews42local.co.uk = is.gd\/gNPVV
    \nnews42local.biz = bit.ly\/bfcDWc
    \nultranews23.com = tiny.cc\/UltrajUqYnews23
    \nultranews23.com = tiny.cc\/UltrahiT7news23
    \nultranews23.com = tiny.cc\/UltraJFv2news23
    \nultranews23.com = tiny.cc\/UltrafG3rnews23
    \nultranews23.com = tiny.cc\/Ultra0TQWnews23
    \nultranews23.com = tiny.cc\/UltraaRW8news23
    \nultranews23.com = tiny.cc\/Ultra5xnEnews23
    \nultranews23.com = tiny.cc\/UltraXt90news23
    \nultranews23.com = tiny.cc\/UltrafKw7news23
    \nultranews23.com = tiny.cc\/UltrabJQbnews23
    \nultranews23.com = tiny.cc\/UltraSsFOnews23
    \nnews88local.com = is.gd\/gPDsy
    \nnews88local.biz = is.gd\/gOPq1
    \nnews88local.org = is.gd\/gOPUX
    \nnews88local.com = is.gd\/gOQI1
    \nultranews23.com = tiny.cc\/UltraffIjnews23
    \nnews88local.com = is.gd\/gOXqs
    \nnews88local.com = is.gd\/gOXXx
    \nnews88local.org = is.gd\/gP4Aj
    \nnews88local.org = is.gd\/gP6yN
    \nultranews23.com = tiny.cc\/UltraGUWenews23
    \nnews88local.net = is.gd\/gPQ1S
    \nultranews23.com = tiny.cc\/Ultrabjwynews23
    \nultranews23.com = tiny.cc\/Ultragxl9news23
    \nnews88local.net = is.gd\/gPftN
    \nnews88local.org = is.gd\/gPgb1
    \nnews88local.org = is.gd\/gPlkm
    \nultranews23.com = tiny.cc\/UltragLHCnews23
    \nnews88local.biz = is.gd\/gPoBK
    \nnews88local.com = is.gd\/gPqMb
    \nnews88local.biz = is.gd\/gPwP4
    \nnews88local.org = bit.ly\/bttwD6
    \nultranews23.com = tiny.cc\/UltrazuZWnews23
    \nultranews23.com = tiny.cc\/Ultrax70Dnews23
    \nnews88local.biz = bit.ly\/dCR623
    \nnews88local.biz = bit.ly\/ajGmui
    \nnewsfamily7.com = a.nf\/2tmNJV
    \nnews88local.com = bit.ly\/aOBoYO
    \nnewsfamily7.com = a.nf\/2tmNJV
    \nnews88local.net = bit.ly\/9C49kE
    \nnews88local.biz = bit.ly\/cJqASy
    \nnews88local.biz = bit.ly\/9EXjGv
    \nnews88local.net = bit.ly\/9AbRRU
    \nnews88local.com = bit.ly\/bMxJFA
    \nnews88local.biz = bit.ly\/9TPphi
    \nnews88local.com = bit.ly\/c2aoIR
    \nnews88local.com = bit.ly\/cwUiTp
    \nnews88local.org = bit.ly\/ceXIWe
    \nnews88local.org = bit.ly\/ayN7mB
    \nnews88local.org = bit.ly\/dwGy6e
    \nnews88local.net = bit.ly\/blEQQW
    \nnewsfamily7.com = a.nf\/2tmNJV
    \nnewschan42.com = a.nf\/kBJUtc
    \nnewsfamily7.com = a.nf\/2tmNJV
    \nnewsfornow1.net = bit.ly\/9r6UkK
    \nthenews4later.net = bit.ly\/9C9ZPP
    \nlocal50news.com = bit.ly\/aH9MEQ
    \nlocal50news.com = bit.ly\/czTx2t
    \nthenews4later.net = bit.ly\/9C9ZPP
    \nlocal50news.com = bit.ly\/cWQ62S
    \nlocal50news.com = bit.ly\/9mUM9t
    \nlocal50news.com = bit.ly\/dwFAzE
    \nultranews23.com = a.nf\/kV7WWd
    \nthenews4later.net = bit.ly\/bOdJk8
    \nbusinessnews10.tk = is.gd\/hleaz
    \nultranews23.com = korta.nu\/f84ji
    \nnewscenter10.co.cc = is.gd\/hmLhQ
    \nbusinessnews21.tk = bit.ly\/9o2AvQ
    \ncnn65news.com = bit.ly\/ciDaWR
    \ncnn65news.com = bit.ly\/9ieRys
    \nultranews23.com = retwt.me\/1PKxk
    \nlocal87news.com = bit.ly\/cdyzi5
    \nlocal87news.com = bit.ly\/9Y5OEA
    \nlocal87news.com = bit.ly\/cdyzi5
    \nlocal87news.com = bit.ly\/9Y5OEA
    \nlocal87news.com = bit.ly\/cdyzi5
    \nlocal87news.com = bit.ly\/9WlaQT
    \nlocal87news.com = bit.ly\/cdyzi5
    \nultranews23.com = retwt.me\/1PKxk
    \nnbc40news.net = bit.ly\/bjI19K
    \nnbc39news.net = bit.ly\/alVIfU
    \nnbc40news.net = bit.ly\/cTHQ2Y
    \nnbc40news.net = bit.ly\/aYrKCa
    \nnbc40news.net = bit.ly\/dieJ5R
    \nnbc39news.net = bit.ly\/dbkWxV
    \nlocal99news.net = bit.ly\/ac1Nt7
    \nultranews23.com = retwt.me\/1PKxk
    \nnbc40news.net = bit.ly\/9uOD6H
    \nultranews23.com = bacn.me\/jrbj
    \nlocal99news.org = bit.ly\/bm8NPu
    \nlocal99news.org = bit.ly\/bFi8J6
    \nlocal99news.com = bit.ly\/bCzIrN
    \nlocal99news.com = bit.ly\/ae3EY2
    \nnbc41news.net = bit.ly\/c7gCyu
    \nlocal99news.net = bit.ly\/9PCUP4
    \nlocal99news.com = bit.ly\/dgeAan
    \nlocal99news.org = bit.ly\/9wqppM
    \nlocal99news.net = bit.ly\/aTLwlD
    \nultranews23.com = bacn.me\/jrbl
    \nlocal99news.com = bit.ly\/dBacHx
    \nlocal99news.org = bit.ly\/chHCja
    \nnbc41news.net = bit.ly\/c7gCyu
    \nlocal99news.org = bit.ly\/bCB5uB
    \nlocal99news.com = bit.ly\/9IBs4W
    \nlocal99news.org = bit.ly\/dsl0Om
    \nultranews23.com = bacn.me\/jrbj
    \nnbc41news.net = bit.ly\/gqRtBZ
    \nnbc41news.net = bit.ly\/f5VsQz
    \nlocal90news.net = bit.ly\/gKy1NM
    \ncnbc14news.net = bit.ly\/fot9an
    \nnbc41news.net = bit.ly\/i0jOK2
    \nultranews23.com = bacn.me\/jrbp
    \nnbc41news.net = bit.ly\/gFJe8e
    \nnbc41news.net = bit.ly\/fgpSVG
    \nnbc7newsmedia.net = bit.ly\/9lBObh
    \nultranews23.com = bacn.me\/jrbn
    \nlocal46news.org = bit.ly\/fcPLLc
    \nlocal46news.org = bit.ly\/hGN6E0
    \ncnbc3news.net = bit.ly\/eGEYhq
    \ncnbc3news.net = bit.ly\/g2u93V
    \nultranews23.com = retwt.me\/1PKxk
    \nultranews23.com = bacn.me\/jrbk
    \nultranews23.com = retwt.me\/1PKxk
    \nmsnbcnews4.net = bit.ly\/fGupR0
    \nmsnbcnews4.net = bit.ly\/hq2gX3
    \nultranews23.com = retwt.me\/1PKxk
    \nultranews23.com = bacn.me\/jrbj
    \nultranews23.com = bacn.me\/jrbp
    \nultranews23.com = bacn.me\/jrbk
    \nultranews23.com = bacn.me\/jrbl
    \nultranews23.com = bacn.me\/jrbm
    \nmsnbcnews4.net = bit.ly\/i8iYaK
    \nultranews23.com = bacn.me\/jrbl
    \nnbcnews7.net = bit.ly\/h0Kw5O
    \ncnbc3news8.com = bit.ly\/hnQyy7
    \nabcnews12.net = bit.ly\/gnP0r0
    \nabcnews12.net = bit.ly\/fr2era
    \nabcnews12.net = bit.ly\/eLpV1n
    \nabcnews12.net = bit.ly\/gT7zEx
    \nabcnews12.net = bit.ly\/evDdv9
    \nabcnews11.net = bit.ly\/i0AdRc
    \nabcnews11.net = bit.ly\/hB00NV
    \nabcnews11.net = bit.ly\/haD230
    \nabcnews12.net = bit.ly\/eC6Nib
    \nabcnews11.net = bit.ly\/eH1AEF
    \nabcnews12.net = bit.ly\/gdA3tj
    \nabcnews12.net = bit.ly\/hTHdgL
    \nabcnews11.net = bit.ly\/ggMB1g
    \nabcnews12.net = bit.ly\/dVHHsG
    \nabcnews11.net = bit.ly\/f34jVH
    \nabcnews12.net = bit.ly\/hMf52P
    \nabcnews11.net = bit.ly\/fycYPy
    \nmsnbcnews11.net = bit.ly\/i6CZN3
    \nmsnbcnews11.net = bit.ly\/fmRgsD
    \nnbcnews12.net = bit.ly\/gANdZw
    \nmsnbcnews11.net = bit.ly\/gadsv7
    \ncbsnews12.net = bit.ly\/hurzVY
    \nmsnbcnews11.net = bit.ly\/hBXuRH
    \ncbsnews12.net = bit.ly\/hjGq7d
    \ncbsnews12.net = bit.ly\/gWwBD8
    \ncbsnews12.net = bit.ly\/fj1m2B
    \nhere4newslocal.net = bit.ly\/hQ68Yq
    \nnb18newstoday.info = i5.be\/SY6
    \nusnews3.com = a.nf\/K3gdA1
    \nnewswebguide.com = tinyurl.com\/6x2b4qf
    \ncnn65news.net = bacn.me\/k55j
    \ncnn65news.net = bacn.me\/k59p
    \nglobal81news.net = bacn.me\/k6mp
    \nnewschan42.com = a.nf\/lrW38G
    \nusnews3.com = a.nf\/K3gdA1
    \nnewschan42.com = a.nf\/lrW38G
    \nwalletnews1.info = bit.ly\/eRuN9c
    \nnewschan42.com = a.nf\/lrW38G
    \nlocal22news.biz = bacn.me\/kbzd
    \nnewschan42.com = a.nf\/lrW38G
    \nusnews3.com = a.nf\/K3gdA1
    \nnewschan42.com = a.nf\/lrW38G
    \nlocal22news.biz = bit.ly\/dGHb1x
    \nusnews3.com = a.nf\/K3gdA1
    \nultranews23.com = a.nf\/GleoGo
    \nusnews3.com = a.nf\/K3gdA1
    \nultranews23.com = a.nf\/GleoGo
    \nusnews3.com = a.nf\/K3gdA1
    \nultranews23.com = a.nf\/GleoGo
    \nusnews3.com = a.nf\/K3gdA1
    \nultranews23.com = a.nf\/GleoGo
    \nusnews3.com = a.nf\/K3gdA1
    \nultranews23.com = a.nf\/GleoGo
    \nusnews3.com = a.nf\/K3gdA1
    \nultranews23.com = a.nf\/GleoGo
    \nusnews3.com = a.nf\/K3gdA1
    \nultranews23.com = a.nf\/GleoGo
    \nbannewsnbc.info = bit.ly\/gysB7G
    \nultranews23.com = a.nf\/GleoGo
    \nbannewsnbc.info = bit.ly\/gysB7G
    \nbannewsnbc.info = bit.ly\/g2xI9o
    \nbannewsnbc.info = bit.ly\/eL2oQx
    \nbannewsnbc.info = bit.ly\/hTX1Tr
    \npolonbcnews.info = bit.ly\/fkXMia
    \npolonbcnews.info = bit.ly\/fC0Gvj
    \npolonbcnews.info = bit.ly\/fBGs29
    \nusnews3.com = a.nf\/K3gdA1\n<\/p><\/blockquote>\n

    Hosted in Russia:<\/p>\n

    news7bfge.com
    \nnews7ffvg.com
    \nnews7ghuf.com
    \nnews7hdtr.com
    \nnews7hhgs.com
    \nnews7hjkl.com
    \nnews7kjih.com
    \nnews7mnvb.com
    \nnews7oksi.com
    \nnews7oplk.com
    \nnews7riue.com
    \nnews7ttdd.com
    \nnews7tuij.com
    \nnews7uuij.com
    \nnews7vfys.com
    \nnews7connect.com
    \nnews7link.com
    \nnews7sync.com
    \nnews7technology.com
    \nnews7udomain.com
    \nnews7uinternet.com
    \nnews7usource.com
    \nnews7utechnology.com
    \naccessnews11.com
    \nb2news11.com
    \nbuynews11.com
    \nbytenews11.com
    \ncompunews11.com
    \nconnectnews11.com
    \ncybernews11.com
    \ndirectnews11.com
    \ndomainnews11.com
    \ne-news11.com
    \nenews11.com
    \neznews11.com
    \ni-news11.com
    \ninews11oi.com
    \ninfounews11a.com
    \ninternetnews11.com
    \ninternews11.com
    \nnews11asuy.com
    \nnews11hjgf.com
    \nnews11iuyr.com
    \nnews11kdjc.com
    \nnews11qoiu.com
    \nnews11quyw.com
    \nnews11qwuo.com
    \nnews11vyru.com\n<\/p><\/blockquote>\n

    Hosted in Hong Kong:<\/p>\n

    buycnbc1aok.com
    \ninternetcnbc1wo.com
    \nprocnbc1wo.com
    \nsellcnbc1wo.com<\/p><\/blockquote>\n

    Hosted in the USA:<\/p>\n

    cnbc20market.com
    \ncnbcjobs20.com
    \ncnbc20early.com<\/p><\/blockquote>\n","protected":false},"excerpt":{"rendered":"

    During the last couple of weeks I have listed hundreds of domains that are part of an ongoing spam campaign advertising bogus “Work at home jobs”. The websites advertised by these spams were designed to look like they belong to … Continue reading →<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[21,2],"tags":[],"class_list":["post-825","post","type-post","status-publish","format-standard","hentry","category-scams","category-spam"],"_links":{"self":[{"href":"https:\/\/joewein.net\/blog\/wp-json\/wp\/v2\/posts\/825","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/joewein.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/joewein.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/joewein.net\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/joewein.net\/blog\/wp-json\/wp\/v2\/comments?post=825"}],"version-history":[{"count":8,"href":"https:\/\/joewein.net\/blog\/wp-json\/wp\/v2\/posts\/825\/revisions"}],"predecessor-version":[{"id":1871,"href":"https:\/\/joewein.net\/blog\/wp-json\/wp\/v2\/posts\/825\/revisions\/1871"}],"wp:attachment":[{"href":"https:\/\/joewein.net\/blog\/wp-json\/wp\/v2\/media?parent=825"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/joewein.net\/blog\/wp-json\/wp\/v2\/categories?post=825"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/joewein.net\/blog\/wp-json\/wp\/v2\/tags?post=825"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}