Mystery Shopper. Dexter Joseph, [email protected]

Good Day,

My name is Dexter Joseph, I am the recruit manager for Retail Active Inc., A professional Shopping Consultant Co, and this message is an awareness to let the public know that we have a vacant position of a representative in our company. We are seeking representatives from around the globe. As a representative you shop for free plus you get an extra pay of $300 weekly on a Part time basis, you only work 2-3 hours twice in a week.You can visit our website below to read more.

I want you know that this is 100% secured and there is a guarantee in our company.We make use of Certified Cheques approved by the bank.

If you would like to apply for this position, kindly provide the Information requested below for assessment and registration by the company:-

Full Legal Name..........
Address.............
City..........
State.........
Zip Code............
Country............
Age...............
Present occupation.............
Home and Cell .................

We await your urgent response.

Thank you for your help. We look forward to working with you

Thanks
Dexter Joseph
http://www.retailactive.com
(c) 2011 Retail Active Inc.. All rights reserved



Email header details;

Delivered-To: *removed*
Received: by 10.223.13.16 with SMTP id z16cs3938faz;
Fri, 22 Jul 2011 07:22:59 -0700 (PDT)
Received: by 10.223.40.198 with SMTP id l6mr2205690fae.14.1311344579133;
Fri, 22 Jul 2011 07:22:59 -0700 (PDT)
Return-Path: <[email protected]>
Received: from nm3-vm0.bullet.mail.ird.yahoo.com (nm3-vm0.bullet.mail.ird.yahoo.com [77.238.189.213])
by mx.google.com with SMTP id 8si3935160fat.109.2011.07.22.07.22.58;
Fri, 22 Jul 2011 07:22:59 -0700 (PDT)
Received-SPF: pass (google.com: best guess record for domain of [email protected] designates 77.238.189.213 as permitted sender) client-ip=77.238.189.213;
Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of [email protected] designates 77.238.189.213 as permitted sender) [email protected]; dkim=pass (test mode) [email protected]
Received: from [77.238.189.55] by nm3.bullet.mail.ird.yahoo.com with NNFMP; 22 Jul 2011 14:22:58 -0000
Received: from [212.82.108.240] by tm8.bullet.mail.ird.yahoo.com with NNFMP; 22 Jul 2011 14:22:58 -0000
Received: from [127.0.0.1] by omp1005.mail.ird.yahoo.com with NNFMP; 22 Jul 2011 14:22:58 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 73192 invoked by uid 60001); 22 Jul 2011 14:22:58 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1311344578; bh=/o35lOtb/DABeaVo3AATwgHgLUHTiyXRyVRIlYthPtU=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content type;b=puk+LsZBjiq12U/dMixZrglBSLsgrn7dtlGw2OeD1PdW2FpWoy9FtrAC1CXMeW2NW8mxfGRCDW8os49RHjJ6sRiDerVCd6/66lGt3xwMpf+qhhFoJiS5Hnnj9C+PQNiDTFeZRoFIC8tL1SioZpsKlyQVXRzhC031Qc97efibxPY=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=g+hmTrZe++/y1p0UBPwSe4wYvPe7U3ODG8L+mhcf/e/peu68lh6jVhG1NmHt0hkOAY+JYwhMDUir9oFmCp0Z1ldq+jy75hEL9GomCV3wE+pJkshywj1xy2zj3PciWoWK
uBjNU52+Lj3KI83Z6AQlFnivcA5TSmxf7uVv3aNzLSY=;
X-YMail-OSG: 9kr1B_wVM1l75gY.PYbUJA3z57derJ7wStZ7VOJS1DbwJWO
sDbOkOGh6aAwRfRxoNtOhbwUi533MzOdumGGJr0ZEIBDi9i7b13izLuIXavE
YT2zWhyS5N21T11QhZUOU1r_UGQdSG15A6IGxgNM8hZArMGpMXtnwVyxOSvq
dzdrVloVlZzfVTaweT1P5x3p.vzPk2mYykk6WmVvTU0Tzv7t0OM3PzsQqcaI
8zo5qG6hnv6knCanQZo6NF7vGsapIzlxEDYy6icy0qPhTuseUkJdQa2h50KV
fBVPBgPWbEetjcyiBahFgziU3UwDCEOxKx72MH47vgHrZaAOnwkUdC5OflW9
y0eLiA3pD8FFc9H50arKeRX_goKtz2QDJOe3X2H_ZxBy4TstAIX1IqdMW_Ft
XYtSQoLtbgcTd6hd2my8oT.UNupfPlMugNGYgFtDC_CzAyIlJ0E6tLXbvi1a
EH.4.xhZuLZif6NGN74__8E8V4x722O6g
Received: from [41.155.30.11] by web132203.mail.ird.yahoo.com via HTTP; Fri, 22 Jul 2011 15:22:58 BST
X-Mailer: YahooMailWebService/0.8.112.307740
Message-ID: <[email protected]>
Date: Fri, 22 Jul 2011 15:22:58 +0100 (BST)
From: Retail Active Inc <[email protected]>
Reply-To: Retail Active Inc <[email protected]>
Subject: Job Offer...... Read and Apply Today!!!
To: "[email protected]" <[email protected]>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-508101033-1311344578=:72030"

Further scam script plus the western union pick up contact details.


Hello *removed*,

this message us an awareness that the cheque will be delivered to your doorstep by tomorrow or next.
Immediately you receive the cheque,take it to the bank to get get it cashed,deduct your $200 as planned and also deduct $100 for your transportation and western union charges.
You are to send the balance to the officer in charge information below

NAME.......Maxine Williams
ADDRESS.........219 Jupiter Street
CITY.........Makati
STATE..........Manila
COUNTRY.........Philippines
ZIPCODE.......1004

After sending the fund yoy are to get back to us with the following

Sender's Name and Address.
Money Transfer Control Number.
Amount wired.

Thanks.
Management.



Email header details;

Delivered-To: *removed*
Received: by 10.142.141.10 with SMTP id o10cs22927wfd;
Sat, 6 Aug 2011 14:41:13 -0700 (PDT)
Received: from mr.google.com ([10.223.15.138])
by 10.223.15.138 with SMTP id k10mr6182607faa.101.1312666873151 (num_hops = 1);
Sat, 06 Aug 2011 14:41:13 -0700 (PDT)
Received: from mr.google.com ([10.223.15.138])
by 10.223.15.138 with SMTP id k10mr6182607faa.101.1312666871677 (num_hops = 1);
Sat, 06 Aug 2011 14:41:11 -0700 (PDT)
Received: by 10.223.15.138 with SMTP id k10mr5020861faa.101.1312666871658;
Sat, 06 Aug 2011 14:41:11 -0700 (PDT)
Delivered-To: *removed*
Received: by 10.223.154.204 with SMTP id p12cs44552faw;
Sat, 6 Aug 2011 14:41:11 -0700 (PDT)
Received: from mr.google.com ([10.52.95.235])
by 10.52.95.235 with SMTP id dn11mr5075021vdb.142.1312666871222 (num_hops = 1);
Sat, 06 Aug 2011 14:41:11 -0700 (PDT)
Received: by 10.52.95.235 with SMTP id dn11mr3691565vdb.142.1312666870438;
Sat, 06 Aug 2011 14:41:10 -0700 (PDT)
Return-Path: <[email protected]>
Received: from ims-d14.mx.aol.com (ims-d14.mx.aol.com [205.188.249.151])
by mx.google.com with ESMTP id u10si6801vdh.5.2011.08.06.14.41.09;
Sat, 06 Aug 2011 14:41:10 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 205.188.249.151 as permitted sender) client-ip=205.188.249.151;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of [email protected] designates 205.188.249.151 as permitted sender) [email protected]
Received: from oms-db01.r1000.mx.aol.com (oms-db01.r1000.mx.aol.com [205.188.58.1])
by ims-d14.mx.aol.com (8.14.1/8.14.1) with ESMTP id p76Lf3Fa021870
for <*removed*>; Sat, 6 Aug 2011 17:41:03 -0400
Received: from mtaomg-ma01.r1000.mx.aol.com (mtaomg-ma01.r1000.mx.aol.com [172.29.41.8])
by oms-db01.r1000.mx.aol.com (AOL Outbound OMS Interface) with ESMTP id 95C7C1C000086
for <*removed*>; Sat, 6 Aug 2011 17:41:03 -0400 (EDT)
Received: from core-mrd003a.r1000.mail.aol.com (core-mrd003.r1000.mail.aol.com [172.29.185.137])
by mtaomg-ma01.r1000.mx.aol.com (OMAG/Core Interface) with ESMTP id 6D7F0E000086
for <*removed*>; Sat, 6 Aug 2011 17:41:03 -0400 (EDT)
To: *removed*
Content-Transfer-Encoding: quoted-printable
Subject: RETAIL ACTIVE INC EVALUATION.
X-MB-Message-Source: WebUI
X-AOL-IP: 217.212.230.96
X-MB-Message-Type: User
MIME-Version: 1.0
From: Retail Active Inc <[email protected]>
Content-Type: text/plain; charset="us-ascii"; format=flowed
X-Mailer: AOL Webmail 34007-MOBILE
Received: from 217.212.230.96 by webmail-d098.sysops.aol.com (205.188.255.9) with HTTP (WebMailUI); Sat, 06 Aug 2011 17:41:03 -0400
Message-Id: <[email protected]>
X-Originating-IP: [217.212.230.96]
Date: Sat, 6 Aug 2011 17:41:03 -0400 (EDT)
x-aol-global-disposition: S
X-SPAM-FLAG:YES
X-AOL-SCOLL-SCORE: 0:2:215989904:93952408
X-AOL-SCOLL-URL_COUNT: 0
X-AOL-REROUTE: YES
x-aol-sid: 3039ac1d29084e3db4ef13fe