Work from home scam

Received apparently from my wife, link in email takes you to apparently CNBC website with story about making $6795 per month, selecting any link takes you to real income on-line site.

From snipped Tue Oct 9 14:07:42 2012
X-Apparently-To: <snipped>@yahoo.co.uk via 77.238.177.169; Tue, 09 Oct 2012 13:07:43 +0000
Return-Path: <snipped>@hotmail.co.uk>
Received-SPF: pass (domain of hotmail.co.uk designates 157.55.2.94 as permitted sender)

X-Originating-IP: [157.55.2.94]
Authentication-Results: mta1055.mail.ukl.yahoo.com from=hotmail.co.uk; domainkeys=neutral (no sig); from=hotmail.co.uk; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO dub0-omc4-s19.dub0.hotmail.com) (157.55.2.94)
by mta1055.mail.ukl.yahoo.com with SMTP; Tue, 09 Oct 2012 13:07:43 +0000
Received: from DUB117-W100 ([157.55.2.72]) by dub0-omc4-s19.dub0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);
Tue, 9 Oct 2012 06:07:42 -0700
Message-ID: <[email protected]>
Return-Path:<snipped>@hotmail.co.uk
Content-Type: multipart/alternative;
boundary="_a1cbdda4-66ea-4012-9b50-a0a5ecd55110_"
X-Originating-IP: [83.27.149.70]
From: <snipped>@hotmail.co.uk>
To: <snipped>@genesisoilandgas.com>, <snipped>@hotmail.co.uk>,
<snipped>@yahoo.co.uk>, <snipped>@hotmail.co.uk>,
<snipped>@hotmail.co.uk>
Subject:
Date: Tue, 9 Oct 2012 14:07:42 +0100
Importance: Normal
MIME-Version: 1.0
X-OriginalArrivalTime: 09 Oct 2012 13:07:42.0822 (UTC) FILETIME=[114F5060:01CDA61F]
Content-Length: 806

http://festoonsystem.co.in/page..google.php?y=0b8m9unaboro&nahox=bizjzi

http://cnbc40news.com/?en
http://realinconline.com/?aff_sub=132

2nd mail received with a different link but same end result.
http://intercom-line.com/page..google.php?v=9s3c9ubjpevi&dutjpo=we