Mystery Shopper. Damian Williams, [email protected]

DETAILS IN ATTACHED FILE


Attached email file;

JOIN MYSTERY SHOPPING PROVIDERS ASSOCIATION SURVEY.

As profiled on Good Morning America, mystery shopping and merchandising provides a flexible way for individuals to earn extra money. "A nationwide leader in mystery shopping and merchandising among top
brands," MSPA are desperately looking for people just like you to be our eyes and ears in well-known stores, restaurants and banks.

Mystery shopping, also known as secret shopping, shadow shopping and merchandising are fun and you can make a huge difference for future customers. As a mystery shopper you work and shop together for pleasure and the pay is $200 on each assignment and it's on Part time basis, you only work 2-3hours twice in a week. If you are interested kindly provide us with the following details;

*Full Name
*Full Physical Address
*City
*State
*Zip Code
*Home and Cell numbers
*Present Occupation {If Any}


These details which are been requested from you are for assessment and registration to Mystery Shopping Provider Association Survey

NOTE******* interested applicants should ensure response is forwarded
to the email below: [email protected]

Thanks
Damian Williams

Email header details;

X-AOL-UID: 3694.230176974
X-AOL-FILE: SHADOWSHOPPER.txt
X-AOL-DATE: Sat, 2 Jul 2011 9:50:46 PM Eastern Daylight Time
Return-Path: <[email protected]>
Received: from mtain-mk02.r1000.mx.aol.com (mtain-mk02.r1000.mx.aol.com [172.29.97.134]) by air-md02.mail.aol.com (v129.10) with ESMTP id MAILINMD024-8b7b4e0fcaf62b0; Sat, 02 Jul 2011 21:50:46 -0400
Received: from mail.btconnect.com (c2bthomr13.btconnect.com [213.123.20.131])
by mtain-mk02.r1000.mx.aol.com (Internet Inbound) with ESMTP id 67E33380000AA;
Sat, 2 Jul 2011 21:50:42 -0400 (EDT)
Received: from 11.Red-80-34-86.staticIP.rima-tde.net (EHLO User) ([80.34.86.11])
by c2bthomr13.btconnect.com
with ESMTP id DLT18511 (AUTH [email protected]);
Sun, 03 Jul 2011 02:43:18 +0100 (BST)
Reply-To: <[email protected]>
From: "DAMIAN WILLIAMS"<[email protected]>
Subject: BECOME A SHADOW SHOPPER
Date: Sun, 3 Jul 2011 03:43:00 +0200
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_00AB_01C2A9A6.337D10F6"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
X-Mirapoint-IP-Reputation: reputation=Fair-1,
source=Queried,
refid=tid=0001.0A0B0303.4E0FC930.0027,
actions=tag
X-Junkmail-Premium-Raw: score=9/50,
refid=2.7.2:2011.7.3.3914:17:9.975,
ip=80.34.86.11,
rules=__RECEIVED_FROM_USER2,
__FRAUD_WEBMAIL_REPLYTO,
__RUS_SUBJ_ALL_UCASE_1251,
__RUS_SUBJ_ALL_UCASE_KOI8R,
__FRAUD_SUBJ_ALLCAPS,
__MIME_VERSION,
__CT,
__CTYPE_HAS_BOUNDARY,
__CTYPE_MULTIPART,
__CTYPE_MULTIPART_MIXED,
__HAS_X_PRIORITY,
__HAS_MSMAIL_PRI,
__HAS_X_MAILER,
USER_AGENT_OE,
__OUTLOOK_MUA_1,
__USER_AGENT_MS_GENERIC,
__HAS_MSGID,
__SANE_MSGID,
MISSING_HEADERS,
__FRAUD_TXT_NAME_CAPS,
ATTACHED_OCT_STRM_TXT,
TXT_ATTACHED,
__LINES_OF_YELLING,
__ATTACHMENT_SIZE_0_10K,
BODYTEXTP_SIZE_3000_LESS,
BODY_SIZE_2000_2999,
__RDNS_POOLED_8,
RDNS_STATIC,
BODY_SIZE_5000_LESS,
RDNS_POOLED,
RDNS_SUSP_SPECIFIC,
WEBMAIL_REPLYTO_NOT_FROM,
__OUTLOOK_MUA,
__PHISH_SPEAR_STRUCTURE_1,
RDNS_SUSP,
__PHISH_SPEAR_STRUCTURE_2,
__FRAUD_WEBMAIL,
FORGED_MUA_OUTLOOK,
BODY_SIZE_7000_LESS,
TO_MALFORMED,
NO_URI_FOUND
X-Junkmail-Status: score=10/50, host=c2bthomr13.btconnect.com
X-Junkmail-Signature-Raw: score=unknown,
refid=str=0001.0A0B020D.4E0FC9DC.001C,ss=1,fgs=0,
ip=80.34.86.11,
so=2010-07-22 22:03:31,
dmn=2009-09-10 00:05:08,
mode=multiengine
X-Junkmail-IWF: false
x-aol-global-disposition: G
X-AOL-VSS-INFO: 5400.1158/71980
X-AOL-VSS-CODE: clean
x-aol-sid: 3039ac1d61864e0fcaf25599
X-AOL-IP: 213.123.20.131
X-AOL-SPF: domain : btconnect.com SPF : none

Further scam script plus details on the western union pick up contact.

Also a fraudulent domain: mspa-recruit.org
Created: Aug 06, 2011
Expires: Aug 06, 2012


Dear Evaluator,
Please take note of a change in Name and Address enclosed in the Package you received via FedEx. You are to use the Name and Address below as APRIL STONE is on Maternity leave. You are to evaluate your bank and any western union outlet close to you.
You are to go straight to your bank to Cash or deposit the material, we want to know how fast and efficient services are rendered at your bank. Please report back to me with a detailed report on the quality of their customer service and the time it took to complete the transaction. Please document your observations of the entire experience and also the duration it took you to cash the Payment.
You are also to take down notes without them seeing your notepad. They should be completely unaware that you are judging them or probably do that when you are out of the Outlet. I need to know whether you were able to carry out your assignment on the same day or you were told to deposit and come back on a later date.
Then you are to deduct $200 from the total amount received as your commission and proceed to any nearest Western Union outlet to wire the remaining funds with money in minutes transfer via Western Union to the Name and Address below. Follow the directions below completely.

NAME...Victor Renderos
ADDRESS...1140 south spruce st
CITY......Montebello
STATE....CA
ZIP CODE...90640

Once that is completed email me the MTCN 10 digits for Western Union as soon as you have wired the funds and the exact amount wired after the deduction of transfer fees with a detailed evaluation of your bank and Western Union Outlet.
Below are the details of your report that you should email back to us immediately you are done with the assignment:

1) Full name and address of the Western Union location that you visited.
2) Quality of their customer service
3) How many employees appeared to be at the outlet?
4) Security system {if any}: Did you feel safe there?
5) The Duration it took them to serve you and process transfer

YOU SHOULD ALSO GET BACK TO US WITH THE FOLLOWING DETAILS ABOUT THE MONEY YOU HAVE SENT VIA WESTERN UNION

OUTLET:

1) Senders Name and Address
2) 10 Digit Money Transfer Control Number {MTCN} for Western Union
3) The amount transferred after deducting transfer charges.
4) You should use your full name and address when sending the money.
5} Copy of your Evaluation Details should be send to [email protected]

To ensure that you are given additional assignments, please make sure you follow all directions completely and complete the assignment today and get back to us with details as requested above immediately.

Yours Sincerely,

--
Damian Williams
Head of Recruiting Department,
MSPA Shadow Shopper®
[email protected]
[email protected]



Email header details;

Delivered-To: *removed*
Received: by 10.223.101.136 with SMTP id c8cs775fao;
Fri, 19 Aug 2011 01:42:46 -0700 (PDT)
Received: by 10.52.66.99 with SMTP id e3mr1748436vdt.494.1313743365645;
Fri, 19 Aug 2011 01:42:45 -0700 (PDT)
Return-Path: <[email protected]>
Received: from mail-vw0-f68.google.com (mail-vw0-f68.google.com [209.85.212.68])
by mx.google.com with ESMTPS id e15si1880955vce.71.2011.08.19.01.42.42
(version=TLSv1/SSLv3 cipher=OTHER);
Fri, 19 Aug 2011 01:42:44 -0700 (PDT)
Received-SPF: neutral (google.com: 209.85.212.68 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=209.85.212.68;
Authentication-Results: mx.google.com; spf=neutral (google.com: 209.85.212.68 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]
Received: by vws12 with SMTP id 12so315609vws.11
for <*removed*>; Fri, 19 Aug 2011 01:42:42 -0700 (PDT)
Bcc: *removed*
MIME-Version: 1.0
Received: by 10.52.112.201 with SMTP id is9mr1755246vdb.379.1313743353932;
Fri, 19 Aug 2011 01:42:33 -0700 (PDT)
Received: by 10.52.109.101 with HTTP; Fri, 19 Aug 2011 01:42:33 -0700 (PDT)
X-Originating-IP: [41.58.97.4]
Date: Fri, 19 Aug 2011 09:42:33 +0100
Message-ID: <CAAhPtLn6Ce2Gv4xSpWMo9eGunbv=Ub0yx1BxbDp2unmwYGyN2w@mail.gmail.com>
Subject: NEW EVALUATION INSTRUCTION
From: Damian Williams <[email protected]>
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary=bcaec547cc2befed9104aad7b50d