Mystery Shopper. [email protected]

We have a mystery shopping assignment in your area and your wages is 200$ per assignment, the job entails evaluation process, visiting Walmart e.t.c. Send below information to get started.

Name
Contact Address
City State Zip code
Phone Numbers
Current Occupation
Secret Shopper®



Email header details;

Received: from mailout11.t-online.de (mailout11.t-online.de [194.25.134.85])
by mtain-dk06.r1000.mx.aol.com (Internet Inbound) with ESMTP id 3B18C380000B8;
Wed, 24 Aug 2011 20:54:36 -0400 (EDT)
Received: from fwd24.aul.t-online.de (fwd24.aul.t-online.de )
by mailout11.t-online.de with smtp
id 1QwNEh-0001Tv-U5; Thu, 25 Aug 2011 01:51:55 +0200
Received: from User (STO5NsZEQt89tDrhICC5SAjlY01-GhmXTInE26rUrrBM-UsX3NSmfQJflqXBrQ7kfglwg2Sw00@[202.65.167.28]) by fwd24.t-online.de
with esmtp id 1QwNEO-0YpR4K0; Thu, 25 Aug 2011 01:51:36 +0200
Reply-To: <[email protected]>
From: "Mystery Shopper Inc"<[email protected]>
Subject: Job Opening!!
Date: Thu, 25 Aug 2011 11:51:34 +1200
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <[email protected]>
X-ID: STO5NsZEQt89tDrhICC5SAjlY01-GhmXTInE26rUrrBM-UsX3NSmfQJflqXBrQ7kfglwg2Sw00
X-TOI-MSGID: 8f3ad246-5d78-4110-a85e-bbff4d1c1ffb
x-aol-global-disposition: S
X-AOL-SCOLL-SCORE: 0:5:70903664:93952408
X-AOL-SCOLL-URL_COUNT: 0
X-AOL-REROUTE: YES
x-aol-sid: 3039ac1db40a4e559d4c2d96
X-AOL-IP: 194.25.134.85
X-AOL-SPF: domain : wjf3g9j8s.homepage.t-online.de SPF : none

Further scam script plus details on the western union pick up contact.

Dear *removed*,

Thank you for your email,I appreciate it. Please proceed to your bank to withdraw the funds as soon as it is cashed you can then proceed in carrying out your assignment, deduct your $200 from the total funds then there after you can get the rest of the funds sent via Western Union to our agency in the UK so they can carry out their own survey on completing the task.

Please find the following Western Union to send below:

Receiver's Name: Dean West
City: London
Country: UK
Amount: ?

As soon as the funds has been sent please get back to me with the following information: Sender's name in full, Total amount sent after western union charges deducted from the funds and the MTCN 10 digit western union control number.

I will be waiting to hear from you as soon as possible.

NB: You will also have to tell Western Union agent you are sending from that the funds is for family purpose ( you are sending to a relative/family member in London UK).

Best regards,

Donald Carlson.


Email header details;

Delivered-To: *removed*
Received: by 10.52.101.169 with SMTP id fh9cs32733vdb;
Wed, 7 Sep 2011 08:50:17 -0700 (PDT)
Return-Path: <[email protected]>
Received-SPF: pass (google.com: domain of [email protected] designates 10.204.138.200 as permitted sender) client-ip=10.204.138.200;
Authentication-Results: mr.google.com; spf=pass (google.com: domain of [email protected] designates 10.204.138.200 as permitted sender) [email protected]; dkim=pass [email protected]
Received: from mr.google.com ([10.204.138.200])
by 10.204.138.200 with SMTP id b8mr3730759bku.0.1315410615713 (num_hops = 1);
Wed, 07 Sep 2011 08:50:15 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=gamma;
h=mime-version:in-reply-to:references:date:message-id:subject:from:to
:content-type;
bh=wxAeW7TxUp6IL6/Xqhqx1sODk8ICIB3qzNXurAs0g+M=;
b=Sc4HFhUSU2zmtiHq2rIhxatUtEolR/WR6jd1E7E5FPANP6Zt+6K5e+oGgsTcsLrfbt
0ROXh/ZF6GXQlgdxAl3m3xxQKEeXdQen2+U6XRC1hMutUP2a6+l0W5sA7GMZ0ZnJ7SlN
KVrbf/4hIVu9bHj1jFPa+Ua8ogknqnNh+UD8o=
MIME-Version: 1.0
Received: by 10.204.138.200 with SMTP id b8mr3730759bku.0.1315410615689; Wed,
07 Sep 2011 08:50:15 -0700 (PDT)
Received: by 10.204.154.149 with HTTP; Wed, 7 Sep 2011 08:50:15 -0700 (PDT)
In-Reply-To: <CAG9Skh+sJeTCCTRGjTUwS=mGpKPGxb2pyncoPVAwR9Ji1aMm5A@mail.gmail.com>
References: <CAOmFMTp9_R_NvVWFci4VXPxuWdPQ+0em3O=tR1gcA4_X4g_CBg@mail.gmail.com>
<CAG9Skh+sJeTCCTRGjTUwS=mGpKPGxb2pyncoPVAwR9Ji1aMm5A@mail.gmail.com>
Date: Wed, 7 Sep 2011 16:50:15 +0100
Message-ID: <CAOmFMTozWczBv6oJ6Lf=ApgUG64isvf_8yKBBbo6_CJdEqDezQ@mail.gmail.com>
Subject: Re: Payment on its way...
From: Donald Carlson <[email protected]>
To: *removed*
Content-Type: multipart/alternative; boundary=000e0cdf95987b632704ac5be60b