Friday, December 16, 2011

Another fake email claim to be from Liberty Reserve

Please ignore such type fraud emails, read what LR says about such type Fraud:
Liberty Reserve DOES NOT offer ANY investment opportunities directly or indirectly.

http://blog.libertyreserve.com/2011/06/notice-about-investments.html

Liberty reserve account number of this scammers : U5197223
this guy blacklisted already, now days send out fraud emails from this host
http://hyipspot.com hyipspot.com - some fake hyip monitoring site

Here is email and headers
============================================
Please note that in all e-mails from Liberty Reserve we will:
Always address you by your first name.
Never send you any links or attached files.
Never ask you to send us your password and/or login PIN.
============================================

Dear Libertyreserve Customer,

Since 2002 Liberty Reserve has made considerable progress and improvement
Serving you with most sophisticated electronic payment solutions possible
We're glad to announce that our service has become the leading e-currency in market
Liberty Reserve services are being improved continuously

Recently we have established a very important relation with leading investment fund traders
Our co-operation opens a possibility to make terminal-dividend investments in short term dates
This is our first publicly launched investment program. In order to participate read the terms below

GET 133% RETURN IN 5 DAYS!
Minimal deposit is ($50) while the maximum is ($50 000) per investment.

Terminal payout rate is 133% leaving you an opportunity to earn $133 USD after $100 USD deposit.
Rate is fixed and your investment funds are fully risk-free, warranted by Liberty Reserve
Make 133% out of your capital for 5 day and become a partner of our trustworthy associates

In order to participate make a deposit to
General depository account U5197223 (LR), - https://sci.libertyreserve.com/?lr_acc=U5197223

The 133% payout will be withdrawn back to your Liberty Reserve USD purse.
All transactions are settled without any delay.
Pay-outs from Liberty Reserve S.A funds are fully automated, paid-out without any additional fees

Thank you

==============================================

Do not reply to this e-mail

Received: by 10.231.113.92 with SMTP id z28cs10432ibp;
Fri, 16 Dec 2011 04:05:20 -0800 (PST)
Received: by 10.52.74.163 with SMTP id u3mr5432195vdv.91.1324037118508;
Fri, 16 Dec 2011 04:05:18 -0800 (PST)
Return-Path:
Received: from server.spencer.com (fa.aa.f4.static.xlhost.com. [173.244.170.250])
by mx.google.com with ESMTPS id ij10si4740511vdb.38.2011.12.16.04.05.15
(version=TLSv1/SSLv3 cipher=OTHER);
Fri, 16 Dec 2011 04:05:18 -0800 (PST)
Received-SPF: neutral (google.com: 173.244.170.250 is neither permitted nor denied by best guess record for domain of hyipspot@server.spencer.com) client-ip=173.244.170.250;
Authentication-Results: mx.google.com; spf=neutral (google.com: 173.244.170.250 is neither permitted nor denied by best guess record for domain of hyipspot@server.spencer.com) smtp.mail=hyipspot@server.spencer.com
Received: from hyipspot by server.spencer.com with local (Exim 4.67)
(envelope-from )
id 1RbWHB-000419-RW
for *******@gmail.com; Fri, 16 Dec 2011 06:48:33 -0500
To: ******@gmail.com
Subject: LibertyReserve Investment Plan!
X-PHP-Script: hyipspot.com/admin.php for 95.38.50.66
From: no_reply@libertyreserve.com
Reply-To: no_reply@libertyreserve.com
Message-Id:
Sender:
Date: Fri, 16 Dec 2011 06:48:33 -0500


Another imbecile LOL send out same type email
This one used this IP : 79.143.168.8

here is email and headers :

============================================
Please note that in all e-mails from Liberty Reserve we will:
Always address you by your first name.
Never send you any links or attached files.
Never ask you to send us your password and/or login PIN.
============================================

Dear Liberty Reserve Members,


Liberty Reserve has made considerable progress and improvement, it has become the leading e-currency and its services are being improved continuously.

Recently we have estabilished a very important relation with leading Forex traders from Costa Rica and we decided to give a special offer to you:

GET 150% RETURN IN 7 DAYS!

This opportunity will not last long, so you must react quickly.

Deposits are accepted until December 18. 2011. 00:00 (GMT), which means that you have about 24 hours to make a deposit in case you are interested in this offer.


One unit in this special program is worth 100 US dollars. The minimal deposit is 1 unit ($100), while the maximum deposit is 1000 units ($50000) per member.

You need to make a spend to:

Liberty Reserve account U2139917 - https://sci.libertyreserve.com/?lr_acc=U2139917

The 150% payout will be made back to your LR account in 7 days, on December 25. 2011. 00:00 (GMT).

The payout is GUARANTEED and there is no risk from losing your funds.

This is a TIME LIMITED ONE-TIME OFFER and you must ACT NOW!

Thank you.
Received: by 10.231.113.92 with SMTP id z28cs27808ibp;
Fri, 16 Dec 2011 16:32:32 -0800 (PST)
Received: by 10.213.3.218 with SMTP id 26mr3036565ebo.118.1324081943212;
Fri, 16 Dec 2011 16:32:23 -0800 (PST)
Return-Path:
Received: from mail.elta-kabel.com (ns2.elta-kabel.com. [79.143.168.8])
by mx.google.com with ESMTP id g3si522328eea.118.2011.12.16.16.32.19;
Fri, 16 Dec 2011 16:32:23 -0800 (PST)
Received-SPF: fail (google.com: domain of no_reply@libertyreserve.com does not designate 79.143.168.8 as permitted sender) client-ip=79.143.168.8;
Authentication-Results: mx.google.com; spf=hardfail (google.com: domain of no_reply@libertyreserve.com does not designate 79.143.168.8 as permitted sender) smtp.mail=no_reply@libertyreserve.com
Received: from smtp.elta-kabel.com (unknown [62.68.122.118])
by mail.elta-kabel.com (Postfix) with SMTP id 755DC14A06FC;
Sat, 17 Dec 2011 01:32:13 +0100 (CET)
Received: from 109.97.118.18 by ; Fri, 16 Dec 2011 20:23:11 -0400
Message-ID:
From: ""
Reply-To: ""
To: *******@gmail.com
Subject: Liberty Reserve Investment Offer
Date: Sat, 17 Dec 2011 03:24:11 +0300
X-Mailer: Microsoft Outlook Express 6.00.2462.0000
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="--7782742238183764"
X-Priority: 3
X-MSMail-Priority: Normal


Please blacklist this LR account numbers:
U2139917
U5197223

Tuesday, September 13, 2011

Phishing emails

Please blacklist / write down the following accounts numbers
Fraud LR # U3662958, Fraud LR # U8470122, Fraud PM # U1702130

Here is Phishing emails:
Both emails was sent out from the same server, by the same scammer
admin kolhozniki.com hyip scam
His IP 95.68.111.70 was found near Riga, Riga located in Latvia.

Subject: =?UTF-8?Q?From_Money-News=E2=80=8B-Online_Blog_-_Invest_in_My_Private_Fun?= =?UTF-8?Q?d?=
X-PHP-Script: 72.8.172.158/mail/index.php for 95.68.111.70
Date: Tue, 13 Sep 2011 16:05:33 -0700
From: Paul Abramson
Message-ID:
X-Priority: 3
X-Mailer: PHPMailer 5.0.2 (phpmailer.codeworxtech.com)
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Content-Type: text/plain; charset="UTF-8"
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - dedicated.koddos.com
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [539 536] / [47 12]
X-AntiAbuse: Sender Address Domain - dedicated.koddos.com

Hello,

This offer is only for MNO downlines and my blog readers. Please note that there isn't a website for the program like we have seen for all HYI programs, instead of it, investments are sent manually into my e-currency accounts. The reason of keeping the investment fund 'offline' is because of the security most programs have with hackers, etc.

There are two plans being offered at this time: 120% after 7 days, 150% after 14 days
Minimum to start with is $50, Maximum - $50,000

To invest your funds, please send the deposit directly to my LR/PM account mentioning the plan you choose in the MEMO.
- Liberty Reserve account: U3662958
- Perfect Money account: U1702130


My investments are diversified into sports arbitrage (speculating on different bookmaker opinions as they say), couple of high yield investments that I have selected to work for many months giving me high returns.

Please pay attention to the fact that there were several scammers trying to impersonate me before, so this time I'm sending you this e-mail directly from my blog's local e-mail address to avoid any issues.


Best regards. Paul

--
Daily News and Monitoring
_http://money-news-online.com

Next one claim to be from Gorgonprojectinvest, that is fake also

Subject: GPI - New Plan added
X-PHP-Script: 72.8.172.158/mail/index.php for 95.68.111.70
Date: Tue, 13 Sep 2011 09:52:40 -0700
From: GPI Admin
Message-ID:
X-Priority: 3
X-Mailer: PHPMailer 5.0.2 (phpmailer.codeworxtech.com)
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Content-Type: text/plain; charset="UTF-8"
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - dedicated.koddos.com
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [539 536] / [47 12]
X-AntiAbuse: Sender Address Domain - dedicated.koddos.com

Dear GPI members,

We are proud to announce our first, VIP plan. GorgonProjectInvest would like to thank everyone for the continuous support and cooperation you have put into our investment opportunity.

The plan is called "Gorgon VIP", and return is 150% after 1 day. To invest in this plan, you will be required to deposit at least $100 USD and the maximum is $50,000.

In order to make the deposit into our special plan, you're not required to login in our site. Our system will automatically recognize your user name and investment will be credited as soon as we receive the funds.

Please click on link below in order to make deposit. In memo add your username and plan name. Example: Deposit in VIP Plan - GorgonMember

_https://sci.libertyreserve.com/?lr_acc=U8470122

Please note that we send emails only from gorgonprojectinvest domain, all others are fake.

GorgonProjectInvest Admin

Wednesday, August 10, 2011

Another fake email claim to be from Liberty Reserve

Another scam -- Investment Revolution -- claim to be "invest-program" from Liberty Reserve.
Please ignore such type fraud emails, read what LR says about such type Fraud:
Liberty Reserve DOES NOT offer ANY investment opportunities directly or indirectly.
http://blog.libertyreserve.com/2011/06/notice-about-investments.html

Liberty reserve account number of this scammers : U5197223

Here is fake email:

============================================
Please note that in all e-mails from Liberty Reserve we will:
Always address you by your first name.
Never send you any links or attached files.
Never ask you to send us your password and/or login PIN.
============================================

Dear Member ,

Investment Revolution is Live! ONLY FIVE DAYS LEFT FOR TO JOIN!

We want You to take a part in our third invest-program from Liberty Reserve
Deposits are accepted until 10 of August. The program is then activated till 17 August, 2011
Each unit is valued at $100 tag. Minimal accepted deposit - 1 unit($100), maximum - 200 units($200,000)
Final payout rate is 135% per unit, with an opportunity to get up to $7.000 profit in a week
Dividend-rates are fixed and your funds are fully secured, warranties by Liberty Reserve
No taxation, transactional or withdrawing fees are applied for investments

Our prospective Investors, in order to apply for a program make a spend to:

General depositary account U5197223(LR) - https://sci.libertyreserve.com/?lr_acc=U5197223

Final day for deposits is 12th of August, 2011 00:00 (GMT), any afterward investments shall be reversed
The 135% payout will be withdrawn to your account purse on 17 August 2011 without any delay
This is the last program from Liberty Reserve in current summer season, invest today - profit tomorrow!

Do not reply to this e-mail

Peace & Profit!
Thank you

==============================================


Email header:
Delivered-To: myemail@gmail.com
Received: by 10.231.30.138 with SMTP id u10cs3998ibc;
Wed, 10 Aug 2011 19:18:19 -0700 (PDT)
Received: from mr.google.com ([10.52.175.234])
by 10.52.175.234 with SMTP id cd10mr2531679vdc.245.1313029099616 (num_hops = 1);
Wed, 10 Aug 2011 19:18:19 -0700 (PDT)
Received: by 10.52.175.234 with SMTP id cd10mr1725630vdc.245.1313029099220;
Wed, 10 Aug 2011 19:18:19 -0700 (PDT)
Return-Path:
Received: from ipap.fazaha.com ([173.242.120.226])
by mx.google.com with ESMTPS id dd2si3699340vdc.119.2011.08.10.19.18.18
(version=TLSv1/SSLv3 cipher=OTHER);
Wed, 10 Aug 2011 19:18:19 -0700 (PDT)
Received-SPF: neutral (google.com: 173.242.120.226 is neither permitted nor denied by best guess record for domain of earnhigh@ipap.fazaha.com) client-ip=173.242.120.226;
Authentication-Results: mx.google.com; spf=neutral (google.com: 173.242.120.226 is neither permitted nor denied by best guess record for domain of earnhigh@ipap.fazaha.com) smtp.mail=earnhigh@ipap.fazaha.com
Received: from earnhigh by ipap.fazaha.com with local (Exim 4.69)
(envelope-from )
id 1QrKu1-0000rs-Ap
for myemail@gmail.com; Thu, 11 Aug 2011 06:21:45 +0400
To: myemail@gmail.com
Subject: Hedge-fund investments from Liberty Reserve
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
From: no_reply@libertyreserve.com
Reply-To:
X-Originating-IP: []
X-Originating-Email: [no_reply@libertyreserve.com]
X-Mailer: Anonymail
Message-Id:
Date: Thu, 11 Aug 2011 06:21:45 +0400
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - ipap.fazaha.com
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [502 501] / [47 12]
X-AntiAbuse: Sender Address Domain - ipap.fazaha.com

Monday, July 18, 2011

Fake Liberty Reserve Investment site

Admin of old HYIP scam site called Prosperitywallet.com
Run another scam project Fake investment site that is claimed to be a own by Liberty reserve.
Site name is : libertyreserve-invest.net
This scum tried to gain naive members by spam since he has members emails from his own hyip scams (not only Prosperitywallet)
Here is spam email that this scum sent out last time
============================================
Please note that in all e-mails from Liberty Reserve we will:
Always send e-mails from no_reply@libertyreserve.com
Never ask you to send us your password and/or login PIN.
============================================

Hello,

With Liberty Reserve S.A. you no longer need to worry about your investments online. We are serving millions since 2002 and now you have the opportunity to invest in the worlds largest payment processor.

We propose you three types of investment period: 1 week, 2 weeks and 4 weeks. After the investment period ends, a payment will be made to the same Liberty Reserve account deposit was received from. Choose your plan and click on Deposit Funds, then you will be transferred to the investment page.

You can make direct investments here: http://www.libertyreserve-invest.net/

Please DO NOT reply to this e mail.

Thank you.


Scam Liberty reserve account number : U1111388 (Liberty Reserve)
Old name was U1111388 (ProsperityWallet)

So, please read what LR says about such type Fraud:
Liberty Reserve DOES NOT offer ANY investment opportunities directly or indirectly.
http://blog.libertyreserve.com/2011/06/notice-about-investments.html

6/27/2011
Notice about investments
Dear friends,

It has come to our attention that there have been reports of e-mails appearing to be sent from Liberty Reserve web site regarding an investment opportunity. Please note that Liberty Reserve DOES NOT offer ANY investment opportunities directly or indirectly. The ONLY business Liberty Reserve is in - to execute instructions of our customers correctly, securely and in timely manner regarding their transfers to other Liberty Reserve account holders. Any claims otherwise by anyone are false and misleading. We ask you to forward all suspicious e-mails to our abuse department via ticketing system so that we can investigate the source and take appropriate action against those in violation of our Terms of Service. Please always exercise extreme caution when conducting any business on-line and perform your own due diligence on any entity you wish to do business with on-line. This does not only apply to Liberty Reserve account holders, but it is a good practice in general. Always remember: if the deal sounds too good to be true - it probably is!

You will find more information soon on how to secure even more your on-line experience from our upcoming Consumer Education Center that will offer tips on how to safeguard your information on-line and steps to take to determine the validity of a business on-line.

With best wishes,
Liberty Reserve


Please ignore such type fraud emails.
Stay away from the site : libertyreserve-invest.net
Blacklist this account number: U1111388

Tuesday, June 14, 2011

Fake Email announcing Liberty reserve Debit Card!

Okay they just don't seem to stop! I got an another email from another idiot scammer
Admin vivaprofit.com (HYIP scam that is claim pay about 110% after 1 day)
The trick is old crap to force you setup API.

NEVER DO THIS, SETUP AN API MAY GET YOU LOSE ALL YOUR LR MONEY

Here email header (part)
Received: from shared2.dragonara.net ([91.205.41.152])
by secondary.b2bstoragemail.com
; Tue, 14 Jun 2011 08:53:31 +0100
Received: from nobody by shared2.dragonara.net with local (Exim 4.69)
(envelope-from )
id 1QWORA-0006cH-Sg

Message-ID: <8323a49192759998753335248e9bf89e@vivaprofit.com>
X-Priority: 3
X-Mailer: PHPMailer 5.0.2 (phpmailer.codeworxtech.com)

Here this is email body:

Hello dear Liberty Reserve customer,

we are finally announcing our own Debit Card! Now you can withdraw your LR funds instantly to an plastic VISA debit card. In order to apply for the card, you need to make new settings in your LR account and the card will be sent within five business days by post. There is no charge for the card purchase, but there will be $1.25 fee for every card withdrawal you will make.

1. You need to logon your LR account, go to Merchant Tools (in upper menu).

2. Click on Create new API and enter following entries:
API Name: DebitCard
Sec. Word: DebitCard1

3. Tick Enabled and also check following operations:
Balance, History, Transfer

4. Now enter your Master key and SUBMIT the new settings.

After you have made new settings, confirm them by responding to this e-mail with your LR account number.

--
Liberty Reserve S.A.
Parque Empresarial Forum II
Torre D, Piso 4
San José, Costa Rica
Postal Code: 10903


Well, you should never follow the instructions mentioned in the above.

Also, avoid please this vivaprofit.com HYIP scam just like plague.
Don't spend single cent in this scam.

Tuesday, April 5, 2011

Phishing mail

Well known scammer oskarferengi has issued another phishing mail this time in the name of LibertyReserve.
Some times ago this scammer attempts to blackmail the FxCambier admin.
Latest email same old crap Fraudulent type email, claim to be from liberty reserve department.

Never follow the the instructions mentioned in these sort of mails !!!!!!!!!

Phishing mail:
MIME-Version: 1.0
Received: by 10.213.103.82 with SMTP id j18mr1814014ebo.64.1302012228910; Tue,
05 Apr 2011 07:03:48 -0700 (PDT)
Sender: gioccom@gmail.com
Received: by 10.213.10.6 with HTTP; Tue, 5 Apr 2011 07:03:48 -0700 (PDT)
Date: Tue, 5 Apr 2011 16:03:48 +0200
X-Google-Sender-Auth: jev3CYUwDhtkAthSoy5uFRPU0hQ
Message-ID:
Subject: Liberty Reserve - UPDATE 4
From: "no_reply@libertyreserve.com"

Dear Liberty Reserve Members,

We are back! We are sorry for the outage. We will do our best to avoid such a situation in the future.

Liberty Reserve has made considerable progress and improvement, it has become the leading e-currency and its services are being improved continuously.

Recently we have estabilished a very important relation with leading Forex traders from Costa Rica and we decided to give a special offer to you:

GET 150% RETURN IN 7 DAYS!

This opportunity will not last long, so you must react quickly.

Deposits are accepted until 7. April 2011. 00:00 (GMT), which means that you have about 37 hours to make a deposit in case you are interested in this offer.


One unit in this special program is worth 100 US dollars. The minimal deposit is 1 unit ($100), while the maximum deposit is 1000 units ($50000) per member.

You need to make a spend to:

Liberty Reserve account U1294492 - https://sci.libertyreserve.com/?lr_acc= Fraud LR #

The 150% payout will be made back to your LR account in 7 days, on 14. April 2011. 00:00 (GMT).

The payout is GUARANTEED and there is no risk from losing your funds.

This is a TIME LIMITED ONE-TIME OFFER and you must ACT NOW!

Thank you,
Liberty Reserve Team


Emails of this scammer oskarferengi :
gioccom@gmail.com
oskarferengi@gmail.com

Fraud LR # U1294492

Thursday, January 27, 2011

Another Phishing liberty Reserve site

Another Phishing liberty Reserve site _http://www.libertylreserve.com libertylreserve.com
( liberty l reserve.com )
Whois Records: libertylreserve.com
IP Address: 207.150.212.75
IP Location: United States United States Affinity Internet Inc
Reverse IP: 132 websites use this address.

Phishing spam emails going around right now, claiming to be from LibertyReserve

Here is a copy of the received emails:

Liberty Reserve account access limited.

Dear XXXXXXXXXXX,

We have reason to believe that your account was accessed by a third party. Because protecting the security of your account is our primary concern, we have limited access to sensitive Liberty Reserve account features. We understand that this may be an inconvenience but please understand that this temporary limitation is for your protection.

How can I restore my account access?

Click the link below and confirm your Liberty Reserve account information, otherwise your Liberty Reserve access will remain restricted:

https://www.libertyreserve.com/en/customer/login2/index.aspx
Hiden Link http://www.libertyresecurity.com with a Redirect to libertylreserve.com

Thank you for your prompt attention to this matter. Please understand that this is a security measure meant to help protect you and your account. We apologize for any inconvenience.

© 2002-2011 Liberty Reserve S.A. All rights reserved.