I received the same email and went through a series of task to complete. I got so far that they sent me a check, that suppose to be a start-up check, however, I knew by this point it was a scam. I have the headers that you asked by not sure how much of it you need because it's pretty long. You can edit it if needed. I contacted Quest Diagnostic and informed them of the scam. They told me to report the incident to local authorities and they are handling it on their in. This scam is so big it should have made the news, people are being ripped off. This is the last correspondence I received from the scammers.
Received: from BN6PR1601CA0007.namprd16.prod.outlook.com (10.172.104.145) by
DM5PR1601MB1145.namprd16.prod.outlook.com (10.172.86.15) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id
15.1.829.7 via Mailbox Transport; Tue, 10 Jan 2017 17:13:47 +0000
Received: from inbound.mail.protection.outlook.com (216.32.180.119) by
BN6PR1601CA0007.outlook.office365.com (10.172.104.145) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id
15.1.829.7 via Frontend Transport; Tue, 10 Jan 2017 17:13:46 +0000
Received: from BN3NAM04FT061.eop-NAM04.prod.protection.outlook.com
(10.152.92.51) by BN3NAM04HT215.eop-NAM04.prod.protection.outlook.com
(10.152.93.58) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.803.8; Tue, 10 Jan
2017 17:13:46 +0000
Received: from SNT004-MC8F1.hotmail.com (10.152.92.54) by
BN3NAM04FT061.mail.protection.outlook.com (10.152.92.233) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id
15.1.803.8 via Frontend Transport; Tue, 10 Jan 2017 17:13:45 +0000
Received: from mail-yb0-f173.google.com ([209.85.213.173]) by SNT004-MC8F1.hotmail.com over TLS secured channel with Microsoft SMTPSVC(7.5.7601.23143);
Tue, 10 Jan 2017 09:13:41 -0800
Received: by mail-yb0-f173.google.com with SMTP id 123so2110287ybe.3
for <@msn.com>; Tue, 10 Jan 2017 09:13:42 -0800 (PST)
Received: by 10.37.123.68 with HTTP; Tue, 10 Jan 2017 09:13:41 -0800 (PST)
From: Jessica Hicks <
[email protected]>
To:
Subject: Start-up Check
Thread-Topic: Start-up Check
Thread-Index: AQHSa2TnGpCLlQTmr02BI0d+QNGJ5A==
Date: Tue, 10 Jan 2017 12:13:41 -0500
Message-ID:
<CADzpFFeEuEr8wGuFJoorbYT7SwGXROLqKjEjWDgFZUga8L8RjQ@mail.gmail.com>
Content-Language: en-US
X-MS-Exchange-Organization-AuthAs: Anonymous
X-MS-Exchange-Organization-AuthSource:
BN3NAM04FT061.eop-NAM04.prod.protection.outlook.com
X-MS-Has-Attach:
X-MS-Exchange-Organization-Network-Message-Id:
b1a88236-311e-45f3-5ac1-08d4397c0969
X-MS-Exchange-Organization-SCL: 1
X-MS-Exchange-Organization-PCL: 2
X-Message-Flag: Follow Up
Reply-By: Wed, 11 Jan 2017 12:20:32 -0500
X-MS-TNEF-Correlator:
received-spf: Pass (protection.outlook.com: domain of questscareers.com
designates 209.85.213.173 as permitted sender)
receiver=protection.outlook.com; client-ip=209.85.213.173; helo=
mail-yb0-f173.google.com;
X-Microsoft-Exchange-Diagnostics:
=?utf-8?B?MTtETTVQUjE2MDFNQjExNDU7OTpRbjZBTVNxYjgxWmU2QlpVRzRWdHY2N1dS?=
=?utf-8?B?RllPRzVrRWI3OUVrKzJSS1RwdXovbEFMenRtMHZUUkhhb1d2a0tZV3ZtMGNX?=
=?utf-8?B?WjVQMzVsUWk2Z2FmYjdMWm02S2xGTEVLa3YwNytyTFFZRUcraUtXNmN3Ykdn?=
=?utf-8?B?M3NpQUZzSWVsdm9xeU8xTHIxQW5HRXYzMGxiVWN3cWppY05HaVZJWGtIQmNl?=
=?utf-8?B?V2ZjU0dkUTlqTEdsK1FpdUwzT0dFVzkyNzJVaVRBQkROLzladVNMemVMdTk1?=
=?utf-8?B?TGxBaDh0MWVWT25namw0TklPVkYxMWJTM1FILzB5RkdGanhHckpBTit5ZjRY?=
=?utf-8?B?Z3J2N0h6R2NvbGJjVEZ1b0ZQQUEzRnpzWTBwNjBUMHZzbHdIOW5kN2ZmMTRC?=
=?utf-8?B?eVhJNDJkZ2hLL1daMm9yeWhWRThxcEZLZzVyUUVzVXA0RmhHVitUZXJNZUR0?=
=?utf-8?B?eDRHOHd1eXRrOGx2Z0RFVXFnZHg5dmdRZ2N6dS9KU01FakpraDdEeTBvbG5y?=
=?utf-8?B?QlRqOVZiNlh1ajI4M2JjdFdHT1U3bnRRdlcxeWpKdWpYK0dXRWp5UUJxeXNU?=
=?utf-8?B?dzU5Z0xDZEZIU2pIb2ZwMDNVc1BSRlBFbmxNUzZzU2lBUzVzQlJuM29TOXpr?=
=?utf-8?B?R2dKbFdtSnRuYlJoZWNXWXc5VWRoNjR5SjJWaWNwYktlZFFSNGN2ckFsT3VP?=
=?utf-8?B?N0E4UG5tMkpHK1hvajZ3NmtONk9rSWdwY2tWZzFNNktuUHlCTk1NcDFkS1JQ?=
=?utf-8?B?SCtpcWRuY3pKSDR5RDd2d25ISkJnZElRYWcvSW5VaStUVzhmeDdQeGMvRHNL?=
=?utf-8?B?Tzgyem54bUdidktlcnNFUGhodCtRYkdhaTlwVnV1K3hHck96eHZ4YlkrNHpi?=
=?utf-8?B?UGJqYTBSMkp5dDFCRnhmVFdlNTRUNHBpL05yVnBiVUdIdnY3bG0xaWZBUWFW?=
=?utf-8?B?VWUxSWtnY21hSXBid2h4WFVvYStUb0hDQjZ3UU5UU0JaNGZ5WWkyN21FcVFF?=
=?utf-8?B?ZWxVMTVGdDQ0QTRrbjM3OEE0Y0o0UjkzQWEvREQxZllRSFRhRlhHT3ordDFW?=
=?utf-8?B?bzRWUWtsZDMzMHhJTE8wdmhSNjRuUlYybHV6bmZtSFpPNGxPZU5JR2JtUXdX?=
=?utf-8?B?cTl5VXVuY2hFSm5XQ3lGTGRORU9hVEFjYU41bzhubFJBWVdLcXJRTWtENHRJ?=
=?utf-8?B?ZE53Wm5neG9hYnN0RWRNUmVoaVE5cjJlSXU1WWQ1Q1V3WjU4NTNadk5adHJR?=
=?utf-8?B?K0ZIMGFTR0pPZnd5ajYwY3Z2YmVyR3BIUjd6VlZqYlhuYjdpOUUwSlErRlR2?=
=?utf-8?Q?dSvb0SNDpjJd+U4j5TiqzEZsMsVck4/q4=3D?=
X-Microsoft-Antispam-Mailbox-Delivery:
abwl:0;wl:0;pcwl:0;kl:0;iwl:0;ijl:0;dwl:0;dkl:0;rwl:0;ex:0;auth:1;dest:I;WIMS-SenderIP:209.85.213.173;WIMS-SPF:questscareers%2ecom;WIMS-DKIM:questscareers%2ecom;WIMS-822:jessica%2ehicks%40questscareers%2ecom;WIMS-PRA:jessica%2ehicks%40questscareers%2ecom;WIMS-AUTH:PASS;ENG:(102400090);
Content-Type: multipart/alternative;
boundary="_000_CADzpFFeEuEr8wGuFJoorbYT7SwGXROLqKjEjWDgFZUga8L8RjQmail_"
MIME-Version: 1.0
--_000_CADzpFFeEuEr8wGuFJoorbYT7SwGXROLqKjEjWDgFZUga8L8RjQmail_
X-Microsoft-Exchange-Diagnostics:
=?utf-8?B?MTtETTVQUjE2MDFNQjExNDU7OTpRbjZBTVNxYjgxWmU2QlpVRzRWdHY2N1dS?=
=?utf-8?B?RllPRzVrRWI3OUVrKzJSS1RwdXovbEFMenRtMHZUUkhhb1d2a0tZV3ZtMGNX?=
=?utf-8?B?WjVQMzVsUWk2Z2FmYjdMWm02S2xGTEVLa3YwNytyTFFZRUcraUtXNmN3Ykdn?=
=?utf-8?B?M3NpQUZzSWVsdm9xeU8xTHIxQW5HRXYzMGxiVWN3cWppY05HaVZJWGtIQmNl?=
=?utf-8?B?V2ZjU0dkUTlqTEdsK1FpdUwzT0dFVzkyNzJVaVRBQkROLzladVNMemVMdTk1?=
=?utf-8?B?TGxBaDh0MWVWT25namw0TklPVkYxMWJTM1FILzB5RkdGanhHckpBTit5ZjRY?=
=?utf-8?B?Z3J2N0h6R2NvbGJjVEZ1b0ZQQUEzRnpzWTBwNjBUMHZzbHdIOW5kN2ZmMTRC?=
=?utf-8?B?eVhJNDJkZ2hLL1daMm9yeWhWRThxcEZLZzVyUUVzVXA0RmhHVitUZXJNZUR0?=
=?utf-8?B?eDRHOHd1eXRrOGx2Z0RFVXFnZHg5dmdRZ2N6dS9KU01FakpraDdEeTBvbG5y?=
=?utf-8?B?QlRqOVZiNlh1ajI4M2JjdFdHT1U3bnRRdlcxeWpKdWpYK0dXRWp5UUJxeXNU?=
=?utf-8?B?dzU5Z0xDZEZIU2pIb2ZwMDNVc1BSRlBFbmxNUzZzU2lBUzVzQlJuM29TOXpr?=
=?utf-8?B?R2dKbFdtSnRuYlJoZWNXWXc5VWRoNjR5SjJWaWNwYktlZFFSNGN2ckFsT3VP?=
=?utf-8?B?N0E4UG5tMkpHK1hvajZ3NmtONk9rSWdwY2tWZzFNNktuUHlCTk1NcDFkS1JQ?=
=?utf-8?B?SCtpcWRuY3pKSDR5RDd2d25ISkJnZElRYWcvSW5VaStUVzhmeDdQeGMvRHNL?=
=?utf-8?B?Tzgyem54bUdidktlcnNFUGhodCtRYkdhaTlwVnV1K3hHck96eHZ4YlkrNHpi?=
=?utf-8?B?UGJqYTBSMkp5dDFCRnhmVFdlNTRUNHBpL05yVnBiVUdIdnY3bG0xaWZBUWFW?=
=?utf-8?B?VWUxSWtnY21hSXBid2h4WFVvYStUb0hDQjZ3UU5UU0JaNGZ5WWkyN21FcVFF?=
=?utf-8?B?ZWxVMTVGdDQ0QTRrbjM3OEE0Y0o0UjkzQWEvREQxZllRSFRhRlhHT3ordDFW?=
=?utf-8?B?bzRWUWtsZDMzMHhJTE8wdmhSNjRuUlYybHV6bmZtSFpPNGxPZU5JR2JtUXdX?=
=?utf-8?B?cTl5VXVuY2hFSm5XQ3lGTGRORU9hVEFjYU41bzhubFJBWVdLcXJRTWtENHRJ?=
=?utf-8?B?ZE53Wm5neG9hYnN0RWRNUmVoaVE5cjJlSXU1WWQ1Q1V3WjU4NTNadk5adHJR?=
=?utf-8?B?K0ZIMGFTR0pPZnd5ajYwY3Z2YmVyR3BIUjd6VlZqYlhuYjdpOUUwSlErRlR2?=
=?utf-8?Q?dSvb0SNDpjJd+U4j5TiqzEZsMsVck4/q4=3D?=
X-Microsoft-Antispam-Mailbox-Delivery:
abwl:0;wl:0;pcwl:0;kl:0;iwl:0;ijl:0;dwl:0;dkl:0;rwl:0;ex:0;auth:1;dest:I;WIMS-SenderIP:209.85.213.173;WIMS-SPF:questscareers%2ecom;WIMS-DKIM:questscareers%2ecom;WIMS-822:jessica%2ehicks%40questscareers%2ecom;WIMS-PRA:jessica%2ehicks%40questscareers%2ecom;WIMS-AUTH:PASS;ENG:(102400090);
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
SGVsbG8gUGFtZWxhLA0KDQpIb3cgYXJlIHlvdSBkb2luZyB0b2RheSwgSSBob3BlIGZpbmU/IEkg
Z290IHVwZGF0ZWQgYWJvdXQgeW91ciBzdGFydC11cCBjaGVjaywgSSBqdXN0IHRyYWNrZWQgaXQg
bm93IGFuZCBkaXNjb3ZlcmVkIGl0IGhhcyBiZWVuIGRlbGl2ZXJlZCB0byB5b3VyIEhPTC4gRG8g
Y29uZmlybSB0aGF0IHRvIG1lIG5vdyBhbmQgcmVwb3J0IHRvIG1lIG9uIEFJTSBub3cuDQotLS0t
LQ0KUmVnYXJkcywNCkplc3NpY2EgSGlja3MNCg==
--_000_CADzpFFeEuEr8wGuFJoorbYT7SwGXROLqKjEjWDgFZUga8L8RjQmail_
X-Microsoft-Exchange-Diagnostics:
=?utf-8?B?MTtETTVQUjE2MDFNQjExNDU7OTpRbjZBTVNxYjgxWmU2QlpVRzRWdHY2N1dS?=
=?utf-8?B?RllPRzVrRWI3OUVrKzJSS1RwdXovbEFMenRtMHZUUkhhb1d2a0tZV3ZtMGNX?=
=?utf-8?B?WjVQMzVsUWk2Z2FmYjdMWm02S2xGTEVLa3YwNytyTFFZRUcraUtXNmN3Ykdn?=
=?utf-8?B?M3NpQUZzSWVsdm9xeU8xTHIxQW5HRXYzMGxiVWN3cWppY05HaVZJWGtIQmNl?=
=?utf-8?B?V2ZjU0dkUTlqTEdsK1FpdUwzT0dFVzkyNzJVaVRBQkROLzladVNMemVMdTk1?=
=?utf-8?B?TGxBaDh0MWVWT25namw0TklPVkYxMWJTM1FILzB5RkdGanhHckpBTit5ZjRY?=
=?utf-8?B?Z3J2N0h6R2NvbGJjVEZ1b0ZQQUEzRnpzWTBwNjBUMHZzbHdIOW5kN2ZmMTRC?=
=?utf-8?B?eVhJNDJkZ2hLL1daMm9yeWhWRThxcEZLZzVyUUVzVXA0RmhHVitUZXJNZUR0?=
=?utf-8?B?eDRHOHd1eXRrOGx2Z0RFVXFnZHg5dmdRZ2N6dS9KU01FakpraDdEeTBvbG5y?=
=?utf-8?B?QlRqOVZiNlh1ajI4M2JjdFdHT1U3bnRRdlcxeWpKdWpYK0dXRWp5UUJxeXNU?=
=?utf-8?B?dzU5Z0xDZEZIU2pIb2ZwMDNVc1BSRlBFbmxNUzZzU2lBUzVzQlJuM29TOXpr?=
=?utf-8?B?R2dKbFdtSnRuYlJoZWNXWXc5VWRoNjR5SjJWaWNwYktlZFFSNGN2ckFsT3VP?=
=?utf-8?B?N0E4UG5tMkpHK1hvajZ3NmtONk9rSWdwY2tWZzFNNktuUHlCTk1NcDFkS1JQ?=
=?utf-8?B?SCtpcWRuY3pKSDR5RDd2d25ISkJnZElRYWcvSW5VaStUVzhmeDdQeGMvRHNL?=
=?utf-8?B?Tzgyem54bUdidktlcnNFUGhodCtRYkdhaTlwVnV1K3hHck96eHZ4YlkrNHpi?=
=?utf-8?B?UGJqYTBSMkp5dDFCRnhmVFdlNTRUNHBpL05yVnBiVUdIdnY3bG0xaWZBUWFW?=
=?utf-8?B?VWUxSWtnY21hSXBid2h4WFVvYStUb0hDQjZ3UU5UU0JaNGZ5WWkyN21FcVFF?=
=?utf-8?B?ZWxVMTVGdDQ0QTRrbjM3OEE0Y0o0UjkzQWEvREQxZllRSFRhRlhHT3ordDFW?=
=?utf-8?B?bzRWUWtsZDMzMHhJTE8wdmhSNjRuUlYybHV6bmZtSFpPNGxPZU5JR2JtUXdX?=
=?utf-8?B?cTl5VXVuY2hFSm5XQ3lGTGRORU9hVEFjYU41bzhubFJBWVdLcXJRTWtENHRJ?=
=?utf-8?B?ZE53Wm5neG9hYnN0RWRNUmVoaVE5cjJlSXU1WWQ1Q1V3WjU4NTNadk5adHJR?=
=?utf-8?B?K0ZIMGFTR0pPZnd5ajYwY3Z2YmVyR3BIUjd6VlZqYlhuYjdpOUUwSlErRlR2?=
=?utf-8?Q?dSvb0SNDpjJd+U4j5TiqzEZsMsVck4/q4=3D?=
X-Microsoft-Antispam-Mailbox-Delivery:
abwl:0;wl:0;pcwl:0;kl:0;iwl:0;ijl:0;dwl:0;dkl:0;rwl:0;ex:0;auth:1;dest:I;WIMS-SenderIP:209.85.213.173;WIMS-SPF:questscareers%2ecom;WIMS-DKIM:questscareers%2ecom;WIMS-822:jessica%2ehicks%40questscareers%2ecom;WIMS-PRA:jessica%2ehicks%40questscareers%2ecom;WIMS-AUTH:PASS;ENG:(102400090);
Content-Type: text/html; charset="utf-8"
Content-ID: <
[email protected]>
Content-Transfer-Encoding: base64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--_000_CADzpFFeEuEr8wGuFJoorbYT7SwGXROLqKjEjWDgFZUga8L8RjQmail_--