Mystery Shopper. Mark Sears, [email protected]

Ebay Secret Shopper LLC,

Are you able, willing and capable, do you have up to three hours spare time weekly, would you like to earn extra income, without affecting your present employment, if so read carefully.

Ebay Secret Shopper® LLC has a mystery shopping assignment in your area, and we would like you to participate, we are accepting application from qualified individuals to become mystery shoppers. It is fun and rewarding, and you choose when and where you want to shop. You are never obligated to accept an assignment. There is no charge to become a shopper and you do not need previous experience.
Funds required for the shopping assignment would also be sent to you within a week of application through mail, and you will not use your personal funds.

HOW TO APPLY
===============
Full Name:
Address:
City:
State:
Zip Code:
Present occupation:
Home:
Cell:

We await your response and look forward to having you on our team.

Thanks
Mark Sears.



Email header details;

Received: from staff.telkomsa.net (puck.telkomsa.net [196.25.211.8])
by mtain-de04.r1000.mx.aol.com (Internet Inbound) with ESMTP id 634ED38000197
for <*removed*>; Thu, 16 Jun 2011 17:00:21 -0400 (EDT)
Received: (qmail 4266 invoked from network); 16 Jun 2011 21:00:12 -0000
Received: from unknown (HELO User) ([email protected]@[144.131.50.175])
(envelope-sender <[email protected]>)
by puck.telkomsa.net (qmail-ldap-1.03) with SMTP
for <[email protected]>; 16 Jun 2011 21:00:18 -0000
Received-SPF: neutral (puck.telkomsa.net: domain of [email protected] is neutral about designating 144.131.50.175 as permitted sender)
Reply-To: <[email protected]>
From: "Ebay Mystery Shopping"<[email protected]>
Subject: *** Job Position Open Read And Reply ***
Date: Fri, 17 Jun 2011 07:02:02 +1000
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Cyberoam-smtpxy-version: 1.0.6.3
X-Cyberoam-AV-Policy: default
X-CTCH-PVer: 0000001
X-CTCH-Spam: Confirmed
X-CTCH-VOD: Unknown
X-CTCH-Flags: 0
X-CTCH-RefID: str=0001.0A150201.4DFA6EDC.0093,ss=3,pt=R_F_7078120,fgs=0
x-aol-global-disposition: G
X-AOL-SCOLL-SCORE: 0:2:302346368:93952408
X-AOL-SCOLL-URL_COUNT: 0
x-aol-sid: 3039ac1d40cc4dfa6ee53f14
X-AOL-IP: 196.25.211.8
X-AOL-SPF: domain : aol.com SPF : neutral

Same email address: [email protected] but slightly different type of scam. This time he's looking for a mule to print and distribute the fake checks.


Pleasant day,

Would you like to work as payroll manager, for an online company seeking immediate employment of officer in this position? If your answer is yes, then answer the few questions listed below

1) Can you work with minimal supervision, and are you a team player?
2) Can you print shipping labels and dispatch company funds as payment to clients(usually in form of checks or money orders)?
3) Do you have a full time job at the moment?
4) Can you work part-time about three hours daily?
5) Do you have a working printer?
6) Can you mail them out using UPS/FEDEX?USPS account provided to you, and have tracking numbers emailed back to me daily?

Donald Fitzergerald



Email header details;

Received: from staff.telkomsa.net (puck.telkomsa.net [196.25.211.8])
by mtain-db01.r1000.mx.aol.com (Internet Inbound) with ESMTP id BE7A4380000E1
for <[email protected]>; Fri, 24 Jun 2011 14:34:33 -0400 (EDT)
Received: (qmail 18357 invoked from network); 24 Jun 2011 18:34:31 -0000
Received: from unknown (HELO User) ([email protected]@[213.203.174.15])
(envelope-sender <[email protected]>)
by puck.telkomsa.net (qmail-ldap-1.03) with SMTP
for <*removed*>; 24 Jun 2011 18:34:31 -0000
Received-SPF: neutral (puck.telkomsa.net: domain of [email protected] is neutral about designating 213.203.174.15 as permitted sender)
Reply-To: <[email protected]>
From: "donald Fitzergerald"<[email protected]>
Subject: EARN $200 WEEKLY WORKING FROM HOME
Date: Fri, 24 Jun 2011 20.34.30 +0200
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
x-aol-global-disposition: G
X-AOL-SCOLL-SCORE: 0:2:188664960:93952408
X-AOL-SCOLL-URL_COUNT: 0
x-aol-sid: 3039ac1d40554e04d8b97cea
X-AOL-IP: 196.25.211.8
X-AOL-SPF: domain : aol.com SPF : neutral

Slightly different email address; [email protected]. Same scam.



Ebay Secret Shopper® LLC,

Are you able willing and capable, do you have up to 3 hrs spare time weekly, would you like to earn extra income, without affecting your present employment if so, read carefully.

Ebay Secret Shopper® LLC has a mystery shopping assignment in your area and we would like you to participate, we accepting applications for qualified individuals to become a mystery shopper. It is fun and rewarding, and you choose when and where you want to shop. You are never obligated to accept an assignment. There is no charge to become a shopper and you do not need previous experience. Funds required for the shopping assignment would also be sent to you within a week of application through mail, and you will not use your personal funds.

HOW TO APPLY
===============
Full Name:
Address:
City:
State:
Zip Code:
Present occupation:
Home:
Cell:

We await your response and look forward to having you on our team.

Thanks
Ayer Ramani



Email header details;

Received: from staff.telkomsa.net (puck.telkomsa.net [196.25.211.8])
by mtain-dc01.r1000.mx.aol.com (Internet Inbound) with ESMTP id 989F83800008B
for <*removed*>; Sat, 23 Jul 2011 06:49:03 -0400 (EDT)
Received: (qmail 32699 invoked from network); 23 Jul 2011 10:48:57 -0000
Received: from unknown (HELO User) ([email protected]@[144.131.50.175])
(envelope-sender <[email protected]>)
by puck.telkomsa.net (qmail-ldap-1.03) with SMTP
for <*removed*>; 23 Jul 2011 10:49:01 -0000
Received-SPF: neutral (puck.telkomsa.net: domain of [email protected] is neutral about designating 144.131.50.175 as permitted sender)
Reply-To: <[email protected]>
From: "Ebay Mystery Shopping"<[email protected]>
Subject: ** Job Position Open Read And Reply ***
Date: Sat, 23 Jul 2011 20:51:13 +1000
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Cyberoam-smtpxy-version: 1.0.6.3
X-Cyberoam-AV-Policy: default
X-CTCH-PVer: 0000001
X-CTCH-Spam: Confirmed
X-CTCH-VOD: Unknown
X-CTCH-Flags: 0
X-CTCH-RefID: str=0001.0A150203.4E2AA718.0158,ss=3,pt=R_F_6325403,fgs=0
x-aol-global-disposition: G
X-AOL-SCOLL-SCORE: 0:2:287227296:93952408
X-AOL-SCOLL-URL_COUNT: 0
x-aol-sid: 3039ac1d40814e2aa71f64c9
X-AOL-IP: 196.25.211.8
X-AOL-SPF: domain : aol.com SPF : neutral

Further scam script plus details on the western union pick up contact.

Hello Mystery Shopper,

This email is to let you know that the funds required for the mystery shopping should be delivered to your doorstep at most this weekend by mail.

As soon as you confirm the delivery of the funds, take them to your bank to Cash, deduct your commission for the assignment which is 10% for the whole assignment. You will be left with a balance, which will be used to carry out the assignment at any Western Union location closest to you.

Do not forget that you will have to be observant and email me back with your observations as described earlier in my previous email.

VENUE FOR THE ASSIGNMENT ( Closest Western Union Location)
Please help us improve our money transfer services.
At westernunion.com, we value your opinion. We are asking our customers to help us better understand the needs of western union users. We appreciate your participation in this survey so that we can continue to offer the highest level of customer service.
Your opinion matters!

Please see below and answer survey here after completing your assignment

1. How fast and Efficient is the Western Union Money Transfer Service?
2. How long does it take you to have the funds wired?
3. How Close is the Western Union Money Transfer Location to your area?
4. Is the Senders Request Form too short or Long? Kindly Advise
5. Is the neighboring environment safe for handling Western Union Money Transfer Service.
6. What is the name of the Local Western Union Money Transfer Agent where you have the funds wired?
7. General Comment ....

All this should be kept unknown from the cashier.
You will be sending the funds same day.
Note that there would be charges for sending western union,and this would be deducted from the balance .

Here is the information to send the funds.....

Name: Maxine Anderson
Address: 219 Jupiter Street
City: Makati
State: Manila
Country: Philippines
Zip Code: 1004

You are expected to have this done today and email us back your results with the following information after you have the funds wired:

1. Name and Address of Sender...
2. Money Transfer Control Number
3. Amount Wired after deducting your 10% pay and the cost of transfer.

Regards,
Management.


Email header details;

Delivered-To: *removed*
Received: by 10.231.138.201 with SMTP id b9cs58965ibu;
Mon, 3 Oct 2011 12:41:48 -0700 (PDT)
Received: by 10.224.189.13 with SMTP id dc13mr313059qab.149.1317670908218;
Mon, 03 Oct 2011 12:41:48 -0700 (PDT)
Return-Path: <[email protected]>
Received: from imr-da02.mx.aol.com (imr-da02.mx.aol.com. [205.188.105.144])
by mx.google.com with ESMTP id hc6si9201022qab.78.2011.10.03.12.41.48;
Mon, 03 Oct 2011 12:41:48 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 205.188.105.144 as permitted sender) client-ip=205.188.105.144;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of [email protected] designates 205.188.105.144 as permitted sender) [email protected]
Received: from mtaout-db02.r1000.mx.aol.com (mtaout-db02.r1000.mx.aol.com [172.29.51.194])
by imr-da02.mx.aol.com (8.14.1/8.14.1) with ESMTP id p93Jf5gV026224;
Mon, 3 Oct 2011 15:41:05 -0400
Message-Id: <[email protected]>
Received: from User (CPE-144-131-50-175.static.vic.bigpond.net.au [144.131.50.175])
by mtaout-db02.r1000.mx.aol.com (MUA/Third Party Client Interface) with ESMTPA id A3556E0000BF;
Mon, 3 Oct 2011 15:40:34 -0400 (EDT)
Reply-To: <[email protected]>
From: "eBay Evaluation LLC"<[email protected]>
Subject: Payment delivery & Instruction for Mystery Shop Evaluation (Respond As Confirmation)
Date: Tue, 4 Oct 2011 06:43:54 +1100
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
x-aol-global-disposition: G
X-AOL-SCOLL-SCORE: 0:2:286011552:93952408
X-AOL-SCOLL-URL_COUNT: 0
x-aol-sid: 3039ac1d33c24e8a0fb260c4
X-AOL-IP: 144.131.50.175