by Terminator5
Sat Nov 05, 2011 1:40 pm
The source host name is "reseller7.hrwebservices.net" and the source IP address is 66.147.238.20
Geo-Location Information
Country United States
State/Region MN
City Isanti
Michelle [email protected]
Begin Scam Email:
I have processed a new system for earnings some free dollar.for more
details click the link below.
http://free-workathome.webs.com
Everyone can earn up to 800$ every day now From liberty to perfect money
exchange!!!Earnings on exchange procedure from Liberty Reserve USD to
Perfect Money USD.
You need to have accounts in 2 payment systems - www.libertyreserve.com
and www.perfectmoney.com and even 10$ in your Liberty Reserve account.
"The reward for hard work is success"
http://free-workathome.webs.com
End Scam Email
Investigation :
Victim Posts
http://umar666.blogspot.com/2011/01/con ... rfect.html
http://www.moneymakergroup.com/Perfect- ... 14336.html
Name Registrant for www.perfectmoney.com . "Roger Alberto Santamaria Del Cid" . US Securities and Exchange Commission Alert for Fraud .
http://www.panama-guide.com/article.php ... 1120407566
From Domain Tools:
domain: perfectmoney.com
reg_created: 2004-11-28 19:20:13
expires: 2018-11-28 19:20:13
created: 2007-10-16 12:57:00
changed: 2011-10-25 10:58:03
transfer-prohibited: yes
ns0: a.dns.gandi.net
ns1: b.dns.gandi.net
ns2: c.dns.gandi.net
owner-c:
nic-hdl: RAS35-GANDI
owner-name: Perfect Money Finance Corp.
organisation: Perfect Money Finance Corp.
person: Roger Alberto Santamaria Del Cid
address: PO Box 0601-00395 Ciudad de Panama Republica de Panama
zipcode: 0601
city: Panama City
country: Panama
phone: +507.8326698
fax: +507.8326698
email: [email protected]
lastupdated: 2011-09-19 04:26:15
admin-c:
nic-hdl: RAS35-GANDI
owner-name: Perfect Money Finance Corp.
organisation: Perfect Money Finance Corp.
person: Roger Alberto Santamaria Del Cid
address: PO Box 0601-00395 Ciudad de Panama Republica de Panama
zipcode: 0601
city: Panama City
country: Panama
phone: +507.8326698
fax: +507.8326698
email: [email protected]
lastupdated: 2011-09-19 04:26:15
End Domain Tools
Header Details:
Delivered-To: xxxxxx
Received: by 10.180.84.8 with SMTP id u8cs13704wiy;
Sat, 5 Nov 2011 08:51:26 -0700 (PDT)
Received: by 10.52.27.236 with SMTP id w12mr3848171vdg.63.1320508283205;
Sat, 05 Nov 2011 08:51:23 -0700 (PDT)
Return-Path: <[email protected]>
Received: from relay4.hrnoc.net (relay4.hrnoc.net. [216.120.227.142])
by mx.google.com with ESMTPS id u15si2930840vcw.99.2011.11.05.08.51.06
(version=TLSv1/SSLv3 cipher=OTHER);
Sat, 05 Nov 2011 08:51:23 -0700 (PDT)
Received-SPF: neutral (google.com: 216.120.227.142 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=216.120.227.142;
Authentication-Results: mx.google.com; spf=neutral (google.com: 216.120.227.142 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]
Received: from reseller7.hrwebservices.net ([66.147.238.20])
by relay4.hrnoc.net with esmtp (Exim 4.63)
(envelope-from <[email protected]>)
id 1RMiW8-0003Kh-5i; Sat, 05 Nov 2011 11:50:48 -0400
Received: from localhost ([127.0.0.1] helo=www.aurorastudios.biz)
by reseller7.hrwebservices.net with esmtpa (Exim 4.69)
(envelope-from <[email protected]>)
id 1RMiQw-0005Td-K6; Sat, 05 Nov 2011 11:45:26 -0400
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8;
format=flowed
Content-Transfer-Encoding: 7bit
Date: Sat, 05 Nov 2011 11:45:26 -0400
From: Michelle <[email protected]>
To: undisclosed-recipients:;
Subject: Thanks
Reply-To: <[email protected]>
Mail-Reply-To: <[email protected]>
Message-ID: <[email protected]>
X-Sender: [email protected]
User-Agent: Roundcube Webmail/0.5.4
X-HR-Scan-Signature: 7d2c30c72ca6c31c764b039101f8f1f8
X-HR-ClamAV-Scan: Clear
X-HR-SA-Score: 3.3 (+++)
X-HR-Status: Normal-([email protected]/66.147.238.20)
Geo-Location Information
Country United States
State/Region MN
City Isanti
Michelle [email protected]
Begin Scam Email:
I have processed a new system for earnings some free dollar.for more
details click the link below.
http://free-workathome.webs.com
Everyone can earn up to 800$ every day now From liberty to perfect money
exchange!!!Earnings on exchange procedure from Liberty Reserve USD to
Perfect Money USD.
You need to have accounts in 2 payment systems - www.libertyreserve.com
and www.perfectmoney.com and even 10$ in your Liberty Reserve account.
"The reward for hard work is success"
http://free-workathome.webs.com
End Scam Email
Investigation :
Victim Posts
http://umar666.blogspot.com/2011/01/con ... rfect.html
http://www.moneymakergroup.com/Perfect- ... 14336.html
Name Registrant for www.perfectmoney.com . "Roger Alberto Santamaria Del Cid" . US Securities and Exchange Commission Alert for Fraud .
http://www.panama-guide.com/article.php ... 1120407566
From Domain Tools:
domain: perfectmoney.com
reg_created: 2004-11-28 19:20:13
expires: 2018-11-28 19:20:13
created: 2007-10-16 12:57:00
changed: 2011-10-25 10:58:03
transfer-prohibited: yes
ns0: a.dns.gandi.net
ns1: b.dns.gandi.net
ns2: c.dns.gandi.net
owner-c:
nic-hdl: RAS35-GANDI
owner-name: Perfect Money Finance Corp.
organisation: Perfect Money Finance Corp.
person: Roger Alberto Santamaria Del Cid
address: PO Box 0601-00395 Ciudad de Panama Republica de Panama
zipcode: 0601
city: Panama City
country: Panama
phone: +507.8326698
fax: +507.8326698
email: [email protected]
lastupdated: 2011-09-19 04:26:15
admin-c:
nic-hdl: RAS35-GANDI
owner-name: Perfect Money Finance Corp.
organisation: Perfect Money Finance Corp.
person: Roger Alberto Santamaria Del Cid
address: PO Box 0601-00395 Ciudad de Panama Republica de Panama
zipcode: 0601
city: Panama City
country: Panama
phone: +507.8326698
fax: +507.8326698
email: [email protected]
lastupdated: 2011-09-19 04:26:15
End Domain Tools
Header Details:
Delivered-To: xxxxxx
Received: by 10.180.84.8 with SMTP id u8cs13704wiy;
Sat, 5 Nov 2011 08:51:26 -0700 (PDT)
Received: by 10.52.27.236 with SMTP id w12mr3848171vdg.63.1320508283205;
Sat, 05 Nov 2011 08:51:23 -0700 (PDT)
Return-Path: <[email protected]>
Received: from relay4.hrnoc.net (relay4.hrnoc.net. [216.120.227.142])
by mx.google.com with ESMTPS id u15si2930840vcw.99.2011.11.05.08.51.06
(version=TLSv1/SSLv3 cipher=OTHER);
Sat, 05 Nov 2011 08:51:23 -0700 (PDT)
Received-SPF: neutral (google.com: 216.120.227.142 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=216.120.227.142;
Authentication-Results: mx.google.com; spf=neutral (google.com: 216.120.227.142 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]
Received: from reseller7.hrwebservices.net ([66.147.238.20])
by relay4.hrnoc.net with esmtp (Exim 4.63)
(envelope-from <[email protected]>)
id 1RMiW8-0003Kh-5i; Sat, 05 Nov 2011 11:50:48 -0400
Received: from localhost ([127.0.0.1] helo=www.aurorastudios.biz)
by reseller7.hrwebservices.net with esmtpa (Exim 4.69)
(envelope-from <[email protected]>)
id 1RMiQw-0005Td-K6; Sat, 05 Nov 2011 11:45:26 -0400
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8;
format=flowed
Content-Transfer-Encoding: 7bit
Date: Sat, 05 Nov 2011 11:45:26 -0400
From: Michelle <[email protected]>
To: undisclosed-recipients:;
Subject: Thanks
Reply-To: <[email protected]>
Mail-Reply-To: <[email protected]>
Message-ID: <[email protected]>
X-Sender: [email protected]
User-Agent: Roundcube Webmail/0.5.4
X-HR-Scan-Signature: 7d2c30c72ca6c31c764b039101f8f1f8
X-HR-ClamAV-Scan: Clear
X-HR-SA-Score: 3.3 (+++)
X-HR-Status: Normal-([email protected]/66.147.238.20)
Daniel 8 :25
