[email protected] *Fake job offer**

Welcome to Your step recruitment, You have been selected
for assignment as a Detective Shopper in your area, and You
will get $170.00 for being a Detective Shopper. Your employment
packet will include funds for the shopping.

We would like you to participate because it's fun & rewarding.
After you Sign-Up, You will have access to training materials.

F u l l N a m e:
Address (NOT P.O Box):
City, State, Zip:
Phone Number (Valid Cell/Home Phone):

Regards,
Anthony Smith

Mystery Shopper

Return-Path: <[email protected]>
Received: from mx01.dca.untd.com (mx01.dca.untd.com [10.171.44.31])
by maildeliver11.dca.untd.com with SMTP id AABLCZUYVAJHEY6S
for <xxx> (sender <[email protected]>);
Wed, 1 Oct 2014 02:35:15 -0700 (PDT)
Authentication-Results: mx01.dca.untd.com; DKIM=NONE
Received-SPF: Pass
Received: from na01-bn1-obe.outbound.protection.outlook.com
(mail-bn1hn0245.outbound.protection.outlook.com [157.56.110.245])
by mx01.dca.untd.com with SMTP id AABLCZUYTAF6BD5J
for <xxx> (sender <[email protected]>);
Wed, 1 Oct 2014 02:35:15 -0700 (PDT)
Received: from BY1PR0701MB1205.namprd07.prod.outlook.com (25.160.105.149) by
BY1PR0701MB1350.namprd07.prod.outlook.com (25.160.109.142) with Microsoft
SMTP Server (TLS) id 15.0.1044.10; Wed, 1 Oct 2014 09:35:03 +0000
Received: from BN1PR07CA0064.namprd07.prod.outlook.com (10.255.193.39) by
BY1PR0701MB1205.namprd07.prod.outlook.com (25.160.105.149) with Microsoft
SMTP Server (TLS) id 15.0.1039.15; Wed, 1 Oct 2014 09:34:50 +0000
Received: from BY2FFO11FD006.protection.gbl (2a01:111:f400:7c0c::164) by
BN1PR07CA0064.outlook.office365.com (2a01:111:e400:45::39) with Microsoft
SMTP Server (TLS) id 15.0.1044.10 via Frontend Transport; Wed, 1 Oct 2014
09:34:50 +0000
Received: from exchange.csun.edu (130.166.5.142) by
BY2FFO11FD006.mail.protection.outlook.com (10.1.14.127) with Microsoft SMTP
Server (TLS) id 15.0.1029.15 via Frontend Transport; Wed, 1 Oct 2014 09:34:49
+0000
Received: from EXCHYD2.csun.edu (130.166.5.201) by canvasback.csun.edu
(130.166.5.142) with Microsoft SMTP Server (TLS) id 8.3.298.1; Wed, 1 Oct
2014 02:21:40 -0700
Received: from host.colocrossing.com (130.166.5.11) by EXCHYD2.csun.edu
(130.166.5.201) with Microsoft SMTP Server id 14.3.195.1; Wed, 1 Oct 2014
02:21:36 -0700
Message-ID: <[email protected]>
Reply-To: =?windows-1251?B?U2VjcmV0IFNob3BwZXIgU3VydmV5rg==?=
<[email protected]>
From: =?windows-1251?B?U2VjcmV0IFNob3BwZXIgU3VydmV5rg==?= <[email protected]>
Subject: Important Message - Job Opportunity
Date: Thu, 2 Oct 2014 05:17:12 -0700
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0BE1_01CFDE00.1F8E75F0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Windows Live Mail 16.4.3505.912
X-MimeOLE: Produced By Microsoft MimeOLE V16.4.3505.912
To: Undisclosed recipients:;
Return-Path: [email protected]
X-Originating-IP: [130.166.5.11]
X-EOPAttributedMessage: 0
X-Forefront-Antispam-Report:
CIP:130.166.5.142;CTRY:US;IPV:NLI;EFV:NLI;SFV:SPM;SFS:(10009020)(6009001)(438002)(189002)(
199003)(16796002)(50986999)(20776003)(102836001)(99396003)(71186001)(512884002)(94986001)(
106466001)(21056001)(43066003)(61296003)(84326002)(50226001)(81816999)(53416004)(6806004)(
85306004)(229853001)(89122001)(120916001)(66066001)(80022003)(110136001)(71636004)(4396001
)(53806999)(64706001)(77096002)(81686999)(87286001)(10300001)(89996001)(77156001)(10416600
1)(107046002)(62966002)(85182001)(33656002)(62236002)(881003)(95666004)(46102003)(13809300
3)(109986003)(44706002)(87936001)(1671002)(107886001)(92726001)(88552001)(75432002)(764820
02)(88136002)(90282001)(44976005)(93916002)(85852003)(111386001)(101776003);DIR:OUT;SFP:15
01;SCL:5;SRVR:BY1PR0701MB1205;H:exchange.csun.edu;FPR:;MLV:spm;PTR:canvasback.csun.edu;MX:
1;A:1;LANG:en;
X-Microsoft-Antispam: UriScan:;UriScan:;
X-Microsoft-Antispam: BCL:0;PCL:0;RULEID:;SRVR:BY1PR0701MB1205;
X-Forefront-PRVS: 0351D213B3
Received-SPF: Pass (protection.outlook.com: domain of csun.edu designates
130.166.5.142 as permitted sender) receiver=protection.outlook.com;
client-ip=130.166.5.142; helo=exchange.csun.edu;
Authentication-Results: spf=pass (sender IP is 130.166.5.142)
[email protected];
X-Microsoft-Antispam: BCL:0;PCL:0;RULEID:;SRVR:BY1PR0701MB1350;
X-OriginatorOrg: csun.edu
X-UNTD-BodySize: 1761
X-UNTD-UBE: 5
X-UNTD-UBE-INFO:
29020a037ae3bf0a7b6eca4b8fa767ef2e8fbf07ba875a87a78f9b5e7f1b7f2b0a8f232f23432b8fbf4b2bdf5e
d39fbef79faa9fdf
X-UNTD-SPF: Pass
X-UNTD-DKIM: NONE
X-UNTD-SIGN-INFO:
29020a037ae3bf0a7b9b4e4b3e4b030a4377ee6eee7fce0ae7b3e7237f0a7b027f137707873f3387bb8713
X-ContentStamp: 3:4:3945655597
X-UNTD-Peer-Info: 157.56.110.245|mail-bn1hn0245.outbound.protection.outlook.com|na01-bn1-o
be.outbound.protection.outlook.com|lesl ... [email protected]


* 14.3.195.1 Asahi Net,inc. Tokyo Japan