Money Gram Malaysia, [email protected]

Interesting Reply to Domain on this AFF Email .

The source IP address is 203.82.92.76

Geo-Location Information

Country Malaysia

City Kuala Lumpur

+60169276823 +60 169276823

0060169276823 0060 169276823

From: Money Gram Malaysia [email protected]

Reply-to: [email protected]

Subject: Refrence Numbers: 86147516





Begin Scam Email:

My associate has helped me to send your first payment of $7500 USD to you as instructed by the Malaysian
Government and Mr. David Cameron the United Kingdom prime minister after the last G20 meeting that was
held in Malaysia, making you one of the beneficiaries.Here is the information below.

Refrence Numbers: 86147516
Sender Name Is = Patrick Lee Chun

I told him to keep sending you $7500 USD twice a week
until the FULL payment of ($820000.00 United State Dollars)
is completed.

A certificate will be made to change the Receivers Name
to your name as stated by the Malaysian Government,reconfirm
your {1}Full Names {2}address {3}Mobile Number

via Email to:[email protected] Allan Davis
to proceed.

Note:

You cannot pickup the money until the certificate is
obtained by you.

Regards
Mr. Allan Davis.
Tel: +(60)169276823.

For more info: www.g20.org

End Scam Email

Header Details:

Delivered-To: xxxxxx
Received: by 10.180.107.66 with SMTP id ha2cs120141wib;
Sun, 4 Dec 2011 17:46:58 -0800 (PST)
Received: by 10.180.104.41 with SMTP id gb9mr9790135wib.9.1323049606033;
Sun, 04 Dec 2011 17:46:46 -0800 (PST)
Return-Path: <[email protected]>
Received: from lnx503.hrz.tu-darmstadt.de (lnx503.hrz.tu-darmstadt.de. [130.83.156.232])
by mx.google.com with ESMTPS id s7si9253470wiw.23.2011.12.04.17.46.15
(version=TLSv1/SSLv3 cipher=OTHER);
Sun, 04 Dec 2011 17:46:46 -0800 (PST)
Received-SPF: neutral (google.com: 130.83.156.232 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=130.83.156.232;
Authentication-Results: mx.google.com; spf=neutral (google.com: 130.83.156.232 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]
Received: from www-tud03.hrz.tu-darmstadt.de (www-tud03.hrz.tu-darmstadt.de [130.83.58.3])
by lnx503.hrz.tu-darmstadt.de (8.14.4/8.14.4/HRZ/PMX) with ESMTP id pB51kB98023614;
Mon, 5 Dec 2011 02:46:11 +0100
(envelope-from [email protected])
Received: from apache_159 by www-tud03.hrz.tu-darmstadt.de with local (Exim 4.69)
(envelope-from <[email protected]>)
id 1RXNd8-0007fL-KY; Mon, 05 Dec 2011 02:46:06 +0100
Received: from 203.82.92.76 ([203.82.92.76]) by webmail.tu-darmstadt.de
(Horde Framework) with HTTP; Mon, 05 Dec 2011 02:46:04 +0100
Message-ID: <[email protected]>
Date: Mon, 05 Dec 2011 02:46:04 +0100
From: "Money Gram Malaysia" <[email protected]>
Reply-to: [email protected]
To: undisclosed-recipients:;
Subject: Refrence Numbers: 86147516
MIME-Version: 1.0
Content-Type: text/plain;
charset=ISO-8859-1;
DelSp="Yes";
format="flowed"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
User-Agent: Internet Messaging Program (IMP) H3 (4.2)
X-PMX-TU: seen v1.2 by 5.6.1.2065439, Antispam-Engine: 2.7.2.376379, Antispam-Data: 2011.12.5.13317
X-PMX-RELAY: outgoing

Mail was sent from Nigeria, not Malaysia.

From [email protected] Tue Jul 31 00: 16:12 2012
Return-Path: <[email protected]>
X-Original-To: me
Delivered-To: me
Received: from rosi.szbk.u-szeged.hu (rosi.szbk.u-szeged.hu
[160.114.62.100]) by my box (Postfix) with ESMTP id 95AC82AAF2 for
<me>; Tue, 31 Jul 2012 00:16:05 -0400 (EDT)
Received: from rosi.brc (webmail.brc [192.168.32.50]) (using TLSv1 with
cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate
requested) by rosi.szbk.u-szeged.hu (Postfix) with ESMTPSA id
92D9E110F40A9; Tue, 31 Jul 2012 06:15:09 +0200 (CEST)
Received: from 41.138.184.107 ([41.138.184.107]) by
webmail.szbk.u-szeged.hu (Horde Framework) with HTTP; Tue, 31 Jul 2012
06:15:08 +0200
Message-ID: <[email protected]>
Date: Tue, 31 Jul 2012 06:15:08 +0200
From: "Mr. Allan Davis." <[email protected]>
Reply-To: [email protected]
To: undisclosed-recipients:;
Subject: Refrence Numbers: 86147516
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1; DelSp="Yes"; format="flowed"
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
User-Agent: Internet Messaging Program (IMP) H3 (4.2)
X-Length: 2305
X-UID: 73909

My associate has helped me to send your first payment of $7500 USD to you
as instructed by the Malaysian Government and Mr. David Cameron the United
Kingdom prime minister after the last G20 meeting that was held in
Malaysia, making you one of the beneficiaries.Here is the information
below.

Refrence Numbers: 86147516
Sender Name Is = Patrick Lee Chun

I told him to keep sending you $7500 USD twice a week
until the FULL payment of ($820000.00 United State Dollars)
is completed.

A certificate will be made to change the Receivers Name
to your name as stated by the Malaysian Government,reconfirm
your {1}Full Names {2}address {3}Mobile Number

via Email to:[email protected] Allan Davis
to proceed.For more details call:+447035941336

Note:

You cannot pickup the money until the certificate is
obtained by you.

Regards
Mr. Allan Davis.

For more info: www.g20.org





----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.