Thursday, August 12, 2010

New Phishing site

Another Phishing liberty Reserve site created by HYIP scammer

Site link - _

Registration Service Provided By: Gold-Domain's Customer
Domain name:
Registrant Contact:

John Schreck
1245 Glenwood St.
Livermore, 94550

Whois Records
IP Address:
IP Location: United States - Illinois - Woodstock -
There are 40 domains hosted on this IP address.

Mass spam send out from two different hosting accounts

First from account maxicash( )
X-PHP-Script: for
Second from the variofun ( )sent out from site
X-PHP-Script: for,

Phishing spam emails going around right now, claiming to be from LibertyReserve

Here is a copy of the received emails:

Received: from ( [])
by with ESMTP id g14si722385vcj.141.2010.;
Wed, 11 Aug 2010 10:22:08 -0700 (PDT)
Received-SPF: pass ( best guess record for domain of designates as permitted sender) client-ip=;
Authentication-Results:; spf=pass ( best guess record for domain of designates as permitted sender)
Received: from variofun by with local (Exim 4.69)
(envelope-from )
id 1OjF0A-0008U0-QZ
for; Thu, 12 Aug 2010 00:22:06 +0700
Subject: Liberty Reserve Security Measures!
X-PHP-Script: for,
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: 8bit
Date: Thu, 12 Aug 2010 00:22:06 +0700
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname -
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [569 565] / [47 12]
X-AntiAbuse: Sender Address Domain -

Business account at Liberty Reserve

Dear Member,

We have reason to believe that your account was accessed by a third party. Because protecting the security of your account is our primary concern, we have limited access to sensitive Liberty Reserve account features. We understand that this may be an inconvenience but please understand that this temporary limitation is for your protection.

How can I restore my business account access?

Click the link below and confirm your Liberty Reserve account information, otherwise your Liberty Reserve access will remain restricted:

Thank you for your prompt attention to this matter. Please understand that this is a security measure meant to help protect you and your account. We apologize for any inconvenience.

© 2002 — 2010 Liberty Reserve S.A. All rights reserved.