Phishing emails

Please blacklist / write down the following accounts numbers
Fraud LR # U3662958, Fraud LR # U8470122, Fraud PM # U1702130

Here is Phishing emails:
Both emails was sent out from the same server, by the same scammer
admin kolhozniki.com hyip scam
His IP 95.68.111.70 was found near Riga, Riga located in Latvia.

Subject: =?UTF-8?Q?From_Money-News=E2=80=8B-Online_Blog_-_Invest_in_My_Private_Fun?= =?UTF-8?Q?d?=
X-PHP-Script: 72.8.172.158/mail/index.php for 95.68.111.70
Date: Tue, 13 Sep 2011 16:05:33 -0700
From: Paul Abramson
Message-ID:
X-Priority: 3
X-Mailer: PHPMailer 5.0.2 (phpmailer.codeworxtech.com)
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Content-Type: text/plain; charset="UTF-8"
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - dedicated.koddos.com
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [539 536] / [47 12]
X-AntiAbuse: Sender Address Domain - dedicated.koddos.com

Hello,

This offer is only for MNO downlines and my blog readers. Please note that there isn't a website for the program like we have seen for all HYI programs, instead of it, investments are sent manually into my e-currency accounts. The reason of keeping the investment fund 'offline' is because of the security most programs have with hackers, etc.

There are two plans being offered at this time: 120% after 7 days, 150% after 14 days
Minimum to start with is $50, Maximum - $50,000

To invest your funds, please send the deposit directly to my LR/PM account mentioning the plan you choose in the MEMO.
- Liberty Reserve account: U3662958
- Perfect Money account: U1702130

My investments are diversified into sports arbitrage (speculating on different bookmaker opinions as they say), couple of high yield investments that I have selected to work for many months giving me high returns.

Please pay attention to the fact that there were several scammers trying to impersonate me before, so this time I'm sending you this e-mail directly from my blog's local e-mail address to avoid any issues.


Best regards. Paul

--
Daily News and Monitoring
_http://money-news-online.com

Next one claim to be from Gorgonprojectinvest, that is fake also

Subject: GPI - New Plan added
X-PHP-Script: 72.8.172.158/mail/index.php for 95.68.111.70
Date: Tue, 13 Sep 2011 09:52:40 -0700
From: GPI Admin
Message-ID:
X-Priority: 3
X-Mailer: PHPMailer 5.0.2 (phpmailer.codeworxtech.com)
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Content-Type: text/plain; charset="UTF-8"
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - dedicated.koddos.com
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [539 536] / [47 12]
X-AntiAbuse: Sender Address Domain - dedicated.koddos.com

Dear GPI members,

We are proud to announce our first, VIP plan. GorgonProjectInvest would like to thank everyone for the continuous support and cooperation you have put into our investment opportunity.

The plan is called "Gorgon VIP", and return is 150% after 1 day. To invest in this plan, you will be required to deposit at least $100 USD and the maximum is $50,000.

In order to make the deposit into our special plan, you're not required to login in our site. Our system will automatically recognize your user name and investment will be credited as soon as we receive the funds.

Please click on link below in order to make deposit. In memo add your username and plan name. Example: Deposit in VIP Plan - GorgonMember

_https://sci.libertyreserve.com/?lr_acc=U8470122

Please note that we send emails only from gorgonprojectinvest domain, all others are fake.

GorgonProjectInvest Admin