Mystery Shopper Scam. [email protected]

Includes Fraudulent domain: profitorients.com
Website: http://www.profitorients.com
Created: Sep 05, 2011
Expires: Sep 05, 2012

Website contact details;
ProfitOrients Limited
383 Madison Avenue,
Manhattan.
New York.
10017
Email: [email protected], [email protected]



PROFITORIENTS® is presently recruiting a "limited" number of MYSTERY
SHOPPERS,visit our website http://www.profitorients.com for more details and to sign
up today.

POSITION TITLE: Regional Mystery Shopper

AVAILABILITY: Open

START DATE: Immediate

COMMISSION: $185.00 Per Survey


Email header details;

Received: from mail2.sea5.speakeasy.net (mail2.sea5.speakeasy.net [69.17.117.41])
by mtain-mk06.r1000.mx.aol.com (Internet Inbound) with ESMTP id F33AB3800099B
for <*removed*>; Thu, 22 Sep 2011 08:04:56 -0400 (EDT)
Received: (qmail 18802 invoked from network); 22 Sep 2011 10:53:14 -0000
Received: from 70-91-27-169-busname--panjde.hfc.comcastbusiness.net (HELO Hi) (barry1@[70.91.27.169])
(envelope-sender <[email protected]>)
by mail2.sea5.speakeasy.net (qmail-ldap-1.03) with SMTP
for <[email protected]>; 22 Sep 2011 10:53:13 -0000
Reply-To: <[email protected]>
From: "PROFITORIENTS?"<[email protected]>
Subject: JOB|- ALERT:Mystery Shopper Opening
Date: Thu, 22 Sep 2011 06:53:14 -0400
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
x-aol-global-disposition: G
X-AOL-SCOLL-SCORE: 0:2:252688704:93952408
X-AOL-SCOLL-URL_COUNT: 0
x-aol-sid: 3039ac1d618a4e7b24681df8
X-AOL-IP: 69.17.117.41
X-AOL-SPF: domain : profitorients.com SPF : none

Further scam script plus details on the western union pick up contact.

Dear *removed*,

Payment will be delivered to you today via FedEx with tracking number:
*removed*

Your assignment includes the following phases:

1.) Kindly have the payment Deposited in your bank to have cash for it,
You are to understudy your bank secretly on how effective they are in the
face of recent global financial crisis to know how soon they were able to
cash your check, please indicate the name of your bank and branch when
writing your evaluation feedback, as soon as you have the cash, deduct
your weekly pay ($185.00).

2.) You are to go to any grocery store in your area and make a purchase
of $40.00 on any products, thereby evaluating the cleanliness and employee
effectiveness. You are to observe their services secretly and write your
evaluation. You are to keep to yourself anything you purchase from the
store. You can carry out your evaluation on any of the stores below:
(I) Wal-Mart (II) The Kroger Co. (III) Safeway, Inc. (IV)
Albertson’s LLC (V) Mercy’s

3.) Send funds (cash) from any western union outlet in your area to
another secret evaluator and will be picked up at the exact location where
a customer reported her funds missing, state how complex/easy the to send
form is,time,and general services. This is the information needed to get
the money sent:

NAME: Chioma Nwosu
CITY: Salisbury
STATE: MD
ZIPCODE: 28105

You are to send me the transfer details below after making the transfer:
FULL SENDERS NAME
MTCN NUMBER........... 10 DIGIT NUMBER
TOTAL AMOUNT SENT AFTER CHARGES

NB; Deduct the WESTERN UNION charges from the money you sending.

You would have to record the names of the attendant, time at which you go
to the locations and how many minutes it took you to get service. You
would have to keep a comprehensive report on every activity you carry out.

If there is anything you don't understand please ask before you proceed
with the assignments, no room for mistake.Kindly keep in touch once you
have the payment sent and when assignment is completed.

CONFIRM RECEIPT OF THIS EMAIL ASAP

PS: you are not revealing your mission at the observation field i.e. the
Bank, stores and Western Union location.

Eric Hochevar
Operations
PROFITORIENTS LTD.


Email header details;

Delivered-To: *removed*
Received: by 10.220.189.65 with SMTP id dd1cs81390vcb;
Tue, 4 Oct 2011 12:15:21 -0700 (PDT)
Received: by 10.236.79.170 with SMTP id i30mr8860129yhe.94.1317755721157;
Tue, 04 Oct 2011 12:15:21 -0700 (PDT)
Return-Path: <[email protected]>
Received: from lekki.syskay.com (lekki.syskay.com. [207.44.166.90])
by mx.google.com with ESMTPS id d47si16934186yhn.134.2011.10.04.12.15.20
(version=TLSv1/SSLv3 cipher=OTHER);
Tue, 04 Oct 2011 12:15:20 -0700 (PDT)
Received-SPF: neutral (google.com: 207.44.166.90 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=207.44.166.90;
Authentication-Results: mx.google.com; spf=neutral (google.com: 207.44.166.90 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]
Received: from lekki ([127.0.0.1] helo=profitorients.com)
by lekki.syskay.com with esmtpa (Exim 4.69)
(envelope-from <[email protected]>)
id 1RBAST-00048s-5H
for *removed*; Tue, 04 Oct 2011 20:15:17 +0100
Received: from 41.155.57.36 ([41.155.57.36])
(SquirrelMail authenticated user [email protected])
by profitorients.com with HTTP;
Tue, 4 Oct 2011 20:15:17 +0100
Message-ID: <[email protected]>
Date: Tue, 4 Oct 2011 20:15:17 +0100
Subject: DELIVERY OF PAYMENT & INSTRUCTIONS
From: [email protected]
To: *removed*
User-Agent: SquirrelMail/1.4.22
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Priority: 3 (Normal)
Importance: Normal
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - lekki.syskay.com
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - profitorients.com