Mystery Shopper. White Barry, [email protected]

A progressive mystery shopping company is looking for the mystery secret shopper
contact us for more information [email protected]


Best Regards,
white Barry
Hiring Manager



Email header details;

Received: from penguin01.websposurenameservers.com (penguin01.websposurenameservers.com [213.175.199.240])
by mtain-me06.r1000.mx.aol.com (Internet Inbound) with ESMTP id 53F4E3800010E
for <*removed*>; Thu, 26 May 2011 15:58:25 -0400 (EDT)
Received: from nobody by penguin01.websposurenameservers.com with local (Exim 4.69)
(envelope-from <[email protected]>)
id 1QP8Ib-0006fk-3s
for *removed*; Wed, 25 May 2011 08:14:33 +0100
To: *removed*
Subject: Evaluator Customer Service Position (Mystery Shopper)
X-PHP-Script: http://www.biddypartridgephotography.co ... /qbeat.php for 82.128.1.85
From: White Barry <[email protected]>
Reply-To:
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 8bit
Message-Id: <[email protected]>
Date: Wed, 25 May 2011 08:14:33 +0100
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - penguin01.websposurenameservers.com
X-AntiAbuse: Original Domain - aol.com
X-AntiAbuse: Originator/Caller UID/GID - [99 99] / [47 12]
X-AntiAbuse: Sender Address Domain - penguin01.websposurenameservers.com
x-aol-global-disposition: S
X-AOL-SCOLL-SCORE: 0:2:301618336:93952408
X-AOL-SCOLL-URL_COUNT: 0
X-AOL-REROUTE: YES
x-aol-sid: 3039ac1d608e4ddeb0e12c48
X-AOL-IP: 213.175.199.240
X-AOL-SPF: domain : penguin01.websposurenameservers.com SPF : none

I got a very similar email a few times recently. Targeted at students however (subject: Online Part Time Job Offer For Students $250 Weekly). From email addresses ending in @yahoo.com. It was sent from the same php script on the same website.

Welcome sivigamer!

Please, post the email addresses of the scammers. Other victims who do a Google search will find their way here for advice.

Thank you!