Mystery Shopper Scam. [email protected]

There is no charge to become a shopper.

At optic Shoppers, you will never pay to shop! We pay you!

The assignment will pay you $400/ evaluation and an avg. of 2 evaluations a week.

Show ONLY your continued interest by sending me the following Full name(s) :
Full Physical Address : City, State and Zip :
Contact Numbers(CELL** & Home) :
Email addresses(If you use more than 1) : Age :
Current Occupation : Last Position Held

THOMAS PINK.



Email header details;

Received: from mail.btconnect.com (c2bthomr11.btconnect.com [213.123.20.129])
by mtain-da01.r1000.mx.aol.com (Internet Inbound) with ESMTP id 4618A38000094;
Sun, 4 Sep 2011 16:20:31 -0400 (EDT)
Received: from c2bthomr13.ncs.ibs-infra.bt.com (EHLO mail.btconnect.com) ([10.87.69.234])
by c2bthomr11.btconnect.com (MOS 3.10.10a-GA FastPath queued)
with ESMTP id AGY85021;
Sun, 04 Sep 2011 20:39:44 +0100 (BST)
Received: (from localhost [127.0.0.1])
by c2bthomr13.btconnect.com (MOS 4.2.2-FCS)
id EFO03678;
Sun, 4 Sep 2011 20:39:44 +0100 (BST)
Received: from host86-185-111-41.range86-185.btcentralplus.com (EHLO User) ([86.185.111.41])
by c2bthomr13.btconnect.com
with ESMTP id EFO03676 (AUTH [email protected]);
Sun, 04 Sep 2011 20:39:43 +0100 (BST)
Reply-To: <[email protected]>
From: "pinks(optics)"<[email protected]>
Subject: vacant open
Date: Sun, 4 Sep 2011 19:40:45 -0700
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
X-Mirapoint-IP-Reputation: reputation=Worst-1,
source=Queried,
refid=tid=0001.0A0B0303.4E63CE6D.0094,
actions=tag
X-Junkmail-Status: score=71/50, host=c2bthomr13.btconnect.com
x-aol-global-disposition: S
X-AOL-SCOLL-SCORE: 0:2:211262512:93952408
X-AOL-SCOLL-URL_COUNT: 0
X-AOL-REROUTE: YES
x-aol-sid: 3039ac1d40494e63dd8f1e8d
X-AOL-IP: 213.123.20.129
X-AOL-SPF: domain : btconnect.com SPF : none

Probably from the same scammer.

There is no charge to become a shopper.

At optic Shoppers, you will never pay to shop! We pay you!

The assignment will pay you $400/ evaluation and an avg. of 2 evaluations a week.

Show ONLY your continued interest by sending me

the following Full name(s) :
Full Physical Address : City, State and Zip :
Contact Numbers(CELL** & Home) :
Email addresses(If you use more than 1) : Age :
Current Occupation : Last Position Held

THOMAS PINK.


Email header details;

Received: from mail.btconnect.com (c2beaomr11.btconnect.com [213.123.26.189])
by mtain-da01.r1000.mx.aol.com (Internet Inbound) with ESMTP id 56C1E38000083;
Tue, 6 Sep 2011 18:43:35 -0400 (EDT)
Received: from c2beaomr07.ncs.ibs-infra.bt.com (EHLO mail.btconnect.com) ([10.87.14.167])
by c2beaomr11.btconnect.com (MOS 3.10.10a-GA FastPath queued)
with ESMTP id AEM19314;
Tue, 06 Sep 2011 23:11:59 +0100 (BST)
Received: (from localhost [127.0.0.1])
by c2beaomr07.btconnect.com (MOS 4.2.2-FCS)
id EGT36774;
Tue, 6 Sep 2011 23:08:59 +0100 (BST)
Received: from 95.143.198.62 (EHLO User) ([95.143.198.62])
by c2beaomr07.btconnect.com
with ESMTP id EGT36763 (AUTH [email protected]);
Tue, 06 Sep 2011 23:08:58 +0100 (BST)
Reply-To: <[email protected]>
From: "pink(optics)"<[email protected]>
Subject: vacant offer
Date: Wed, 7 Sep 2011 01:08:58 -0700
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
X-Mirapoint-IP-Reputation: reputation=Worst-1,
source=Queried,
refid=tid=0001.0A0B0303.4E6691A0.0017,
actions=tag
X-Junkmail-Status: score=71/50, host=c2beaomr07.btconnect.com
x-aol-global-disposition: G
X-AOL-SCOLL-SCORE: 0:2:200992688:93952408
X-AOL-SCOLL-URL_COUNT: 0
x-aol-sid: 3039ac1d40494e66a2172a35
X-AOL-IP: 213.123.26.189
X-AOL-SPF: domain : btconnect.com SPF : none

Further scam script plus details on the western union pick up contact.

You will received your 1st Mystery shopper assignment today through the usps priority mail, I need you to carry out the assignment as soon as you receive the pakage, these are the instructions you need:

1. Cash the MONEY ORDER at your bank at once after filling your name and address at the TO: SECTION of the money order that says TO: and then put this name and address at the FROM: SECTION that says from:

name: LAURA MAYS
ADDRESS: 170 Spring St NW,Atlanta, GA 30303

The money order has been left blank so that you can fill it without errors.

2.Deduct 100 for yourself and wire the rest to our accountant in PHILIPPINES given in the below information for the sole purpose of this survey.

YOU WILL SEND THE FUNDS TO:
NAME: MERCY FLAVORS
ADDRESS: 350 A J Villegas Street Ermita
CITY: MANILLA
COUNTRY: PHILIPPINES

TAKE NOTE: PLEASE INSTRUCT THE WESTERN UNION RECEPTIONIST OR CONTROLLER TO MAKE SURE THE MONEY IS SENT TO

PHILIPPINES IN US DOLLARS CURRENCY.

VERY IMPORTANT: PLEASE CONFIRM THAT THIS INFO MATCHES THE INSTRUCTIONS IN THE LETTER YOU RECEIVED BEFORE PROCEEDING ON THE MYSTERY SHOPPER EVALUATION.

THOMAS PINK
MANAGING DIRECTOR.


Email header details;

Delivered-To: *removed*
Received: by 10.220.179.13 with SMTP id bo13cs40064vcb;
Sat, 15 Oct 2011 08:51:42 -0700 (PDT)
Received: by 10.216.137.36 with SMTP id x36mr4558361wei.41.1318693901635;
Sat, 15 Oct 2011 08:51:41 -0700 (PDT)
Return-Path: <[email protected]>
Received: from mail.btconnect.com (c2beaomr11.btconnect.com. [213.123.26.189])
by mx.google.com with ESMTP id t59si5926094weq.29.2011.10.15.08.51.40;
Sat, 15 Oct 2011 08:51:41 -0700 (PDT)
Received-SPF: pass (google.com: best guess record for domain of [email protected] designates 213.123.26.189 as permitted sender) client-ip=213.123.26.189;
Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of [email protected] designates 213.123.26.189 as permitted sender) [email protected]
Received: from mail.btconnect.com (c2beaomr07.ncs.ibs-infra.bt.com [10.87.14.167])
by c2beaomr11.btconnect.com (MOS 3.10.10a-GA)
with ESMTP id AFG38065;
Sat, 15 Oct 2011 16:45:08 +0100 (BST)
Received: (from localhost [127.0.0.1])
by c2beaomr07.btconnect.com (MOS 4.2.2-FCS)
id ETU82217;
Sat, 15 Oct 2011 16:45:07 +0100 (BST)
Received: from 230-49-31-64.servebyte.net (EHLO User) ([64.31.49.230])
by c2beaomr07.btconnect.com
with ESMTP id ETU82215 (AUTH [email protected]);
Sat, 15 Oct 2011 16:45:07 +0100 (BST)
Reply-To: <[email protected]>
From: "mike mayor"<[email protected]>
Subject: assignment delivery
Date: Sat, 15 Oct 2011 08:45:06 -0700
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
X-Mirapoint-IP-Reputation: reputation=Good-1,
source=Queried,
refid=tid=0001.0A0B0302.4E99AA66.005C,
actions=tag
X-Junkmail-Status: score=65/50, host=c2beaomr07.btconnect.com