Fraud Payment. [email protected]

We are looking for a payment representative in America,Canada, Mexico and Europe Salary is base on 10% of every payment you receive on our behalf.All charges such as tax and transfer charges will be deducted from
the balance 90%.Payment that will be sent by our customer via Cashier certified Check, if interested in please send your name, Address, Postal Code, Tel, Country, to [email protected] for more details.



Email header details;

Received: from ironport1-mx.cbr1.mail-filtering.com.au (ironport1-mx.cbr1.mail-filtering.com.au [203.88.115.241])
by mtain-mb03.r1000.mx.aol.com (Internet Inbound) with ESMTP id 3529938000083
for <*removed*>; Sat, 27 Aug 2011 04:01:40 -0400 (EDT)
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: Ak9EAA6yV07LWHUZ/2dsb2JhbABCD4JnAQE+lWWOIGJ3ZAIuHwEBBwEBFAMdBwEyASgObQEOAQkYBwkRhTYBAYIjAQGZWY8kgRaGXYkthkwEjASNDoN/g1uCfAJC
X-IronPort-AV: E=Sophos;i="4.68,285,1312120800";
d="scan'208";a="473427734"
Received: from platypus.cbr.hosting-server.com.au ([203.88.117.25])
by ironport1-mta.cbr1.mail-filtering.com.au with ESMTP; 27 Aug 2011 00:52:00 +1000
Received: from localhost ([127.0.0.1] helo=webmail.dsol.com.au)
by platypus.cbr.hosting-server.com.au with esmtpa (Exim 4.69)
(envelope-from <[email protected]>)
id 1QwxlG-0005gS-Qo; Sat, 27 Aug 2011 00:51:58 +1000
Received: from 69.22.186.98 ([69.22.186.98]) (proxying for 69.22.186.98)
(SquirrelMail authenticated user [email protected])
by webmail.dsol.com.au with HTTP;
Sat, 27 Aug 2011 00:51:58 +1000
Message-ID: <[email protected]>
Date: Sat, 27 Aug 2011 00:51:58 +1000
Subject: Payment Representative !!
From: "Bessen Chemical Com Ltd" <[email protected]>
Reply-To: [email protected]
User-Agent: SquirrelMail/1.4.22
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Priority: 3 (Normal)
Importance: Normal
x-aol-global-disposition: S
X-AOL-SCOLL-SCORE: 0:5:57818132:93952408
X-AOL-SCOLL-URL_COUNT: 0
X-AOL-REROUTE: YES
x-aol-sid: 3039ac1d60174e58a4646224
X-AOL-IP: 203.88.115.241
X-AOL-SPF: domain : bessen.com SPF : fail

Further scam script plus details on the western union pick up contact.

Good day *removed*

Thanks for your update, the company is glad to have you as our representative, please below is the informations to sent to money via Western Union to the Company Project Manager in the Uk for a Seminal, once the funds is been released to you,God will bless you

Please deduct your 10% commission and deduct all expenses from the total amount i will give you further instruction on how to remit the balance amount.

INFORMATIONS NEEDED TO SENT THROUGH WESTERN UNION

1) Receiver Name: Mr. Wong Chang
Address: 34 Triton Square, Regent's Place,
London, NW1 3AN, United Kingdom

Amount: $5000

AFTER PAYMENT VIA WESTERN UNION FILL IN THIS INFORMATIONS
Sender's Name:.........................

Address:.................................

MTCN number:.........................

Please after payment, please ensure you sent us the MTCN number and the sender's name, if you can sent us a scan copy of the transaction it will be appreciated.

Thank you and God bless you

Dr. Li


Email header details;

Delivered-To: *removed*
Received: by 10.52.181.65 with SMTP id du1cs51946vdc;
Thu, 29 Sep 2011 10:48:17 -0700 (PDT)
Received: by 10.68.30.1 with SMTP id o1mr53365793pbh.91.1317318496126;
Thu, 29 Sep 2011 10:48:16 -0700 (PDT)
Return-Path: <[email protected]>
Received: from nm2.bullet.mail.hk2.yahoo.com (nm2.bullet.mail.hk2.yahoo.com. [124.108.111.131])
by mx.google.com with SMTP id k4si2737813pbc.103.2011.09.29.10.48.15;
Thu, 29 Sep 2011 10:48:16 -0700 (PDT)
Received-SPF: neutral (google.com: 124.108.111.131 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=124.108.111.131;
Authentication-Results: mx.google.com; spf=neutral (google.com: 124.108.111.131 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]; dkim=pass (test mode) [email protected]
Received: from [124.108.111.128] by nm2.bullet.mail.hk2.yahoo.com with NNFMP; 29 Sep 2011 17:48:14 -0000
Received: from [124.108.111.126] by tm1.bullet.mail.hk2.yahoo.com with NNFMP; 29 Sep 2011 17:48:14 -0000
Received: from [127.0.0.1] by omp1001.mail.hk2.yahoo.com with NNFMP; 29 Sep 2011 17:48:14 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 61819 invoked by uid 60001); 29 Sep 2011 17:48:14 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com.hk; s=s1024; t=1317318494; bh=Rntb/CSppKadnfU4TnqYKSvxHmh2B/PH8kajEXyrzL8=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=HOw8R7qi9uc0C+E0RcSMpaCPuqA4m03ATYlWt0V4fQC3gO3OUsd+LXjZEOkaCA/Ixzd5O2slpgFjTuPSA8pPaOjn4yt8pYnB7cd4rUBHbCWt0oTCgFEpAb3/ZOeYeh/+RhfbBC4x/tE1xVoBN2TGxPrRS/Ql6JcUgQCYjxJcxO0=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com.hk;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=sdwYB4vGzFDZuIUZyHERUrulpH9wqeyetzZvTY+9F21NWgxv2MLV5FI0q/b7GqVcuGG2nSh17KfSfO6Q9SnQZ6k9o4YkbzylpMIDZX3orEztlcf2yFmkVOWrC1sfN92PT6cAZMjrS5KtxTPAuI/h/5UsCazOlv60GLnyRlGsAqY=;
X-YMail-OSG: doVdox4VM1kXD8.zyoiTTYub.eZmkmqUf5Nxada9ZNfIqof
tqOd9u_IVvC4zzORvOzngBE_UIea6EK1YU_a2DZce41vJWfURvir2AZa1NYw
i27xbewpTr2zFhoUuubUrHqafdr799VGDJw9R1t_MNITdTDRVWGsNrU8ZRbc
X8LdM4wnNnDkCMCpLq7uMKv3bw9bhQYpninDoZXoDyVb9i4CoCydagfgFOuk
4QnGdHrEltdA95EGNwho5iXCPAeQ_XQL_lR4kxUANu.owlgH7dUX2AwxPPs8
xBv7n6gbABt2J1sYSIvkW3Hw.RW3Xxr_CsRpI8X2BCjemxJuDycJta.NnGaM
pPpM8dqfnqNTfSywx2ZafLuVcH.bvtvCAFi4js..S2y5mb_YiCYI-
Received: from [69.22.185.11] by web19207.mail.hk2.yahoo.com via HTTP; Fri, 30 Sep 2011 01:48:14 HKT
X-Mailer: YahooMailClassic/14.0.7 YahooMailWebService/0.8.114.317681
Message-ID: <[email protected]>
Date: Fri, 30 Sep 2011 01:48:14 +0800 (HKT)
From: "Bessen Chemical Co, Ltd" <[email protected]>
Subject: Re: Good Day *removed*
To: *removed*
In-Reply-To: <CAG9SkhLvMxXe9=goOKomCutGqy9g-EHGc0UZ-aXcq0W+tiYfmA@mail.gmail.com>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="1617446220-1229501734-1317318494=:59426"