Employment (Job) Scam – Nigerian 419 Scam
ATTENTION:Anthony Webb also scams under these names/addresses;
Nicholas firstname.lastname@example.org ( Nicholas Matrwe )
Nicholasconeldunii@yahoo.com ( Nicholas Coneldunii )
email@example.com ( Conel Dunii )
firstname.lastname@example.org ( Huge Melvin / Melvin Huge )
email@example.com ( Upesa Spell Temple ) – If you type Upesa Spell Temple in the search log (top right-hand corner) you will see past scams sent under this name/email address.
firstname.lastname@example.org ( Brigette Tre )
email@example.com ( Armstrong Care )
firstname.lastname@example.org ( Collin Peter Claim / Peter Collins Claim )
email@example.com ( Iron Hill Daycare )
EMAIL NUMBER ONE SENT BY Anthony Webb <firstname.lastname@example.org> with the reply address of email@example.com
SUBJECT: BABYSITTER/NANNY NEEDED ASAP!!!
EMAIL: Hello There,
MY BAITING REPLY SENT ONE MONTH LATER: Hello, I would be interested if the job is still available. What City? I don’t like travelling more then 20 minutes commute but depending on payment, benefits, etc. Please message me back if you’re still looking for someone.. Thank you..
”Anthony Webb” wrote back fairly quick under a new email-address firstname.lastname@example.org
EMAIL NUMBER TWO: Thank you for getting back to us.We will be coming to the States on 3rd December, 2012 and we will need your service from 4th of to – 18th of December,2012 excluding Weekends. Will you will be available at that period? Firstly we want to get a Babysitter/Nanny for our little girl before we book our vacation home. We are not sure of the area we would be visiting since we don’t have a nanny to take good care of her. Which part do you live (City & State)? Your decision will determine where we would be staying in your location, let us know if you can take care of her in your home.
Am offering $200 for the nanny job per week from Monday-Friday from 10am-4pm , the main reason why we need your service is that we will be busy during week days because we have to visit some places and we also have lot of Humanitarian works to do around the City.We w ill be dropping her off and pick her up later around your schedules. My daughter is a kid one would like to be with…full of fun and love playing around…she loves toys. I am sure you will be able to give the best care.She is gentle,hardly fall sick,she likes sports,loves to watch cartoons,likes going to the beach,she likes to watch TV mostly and can eat by herself,I’m sure you wont have problems with her.Kindly answer all my questions accordingly. as i am to forward this email to my company as proof that I am paying for a hand in child care.So they can include that in my traveling expenses which is to be paid to me.
The payment will be make in form of US certified check/Money order and it will get to you prior to my arrival in order to make payment for your service and the duration that my kid will be taken care of.Please get back to me with your Name ,Address and phone #.
I am offering you $400 for the service and the payment will be sent to you from one of my client as soon as you get back to me with your full mailing information i mean your contact Address with your contact phone number and the tracking number used in mailing of the check will also be sent to you if you need it.But just one thing that i need to clarify right now is that will you be able to take care of her in my house or you want the agent to bring her down to your house after and when the check has cleared,will you be able to send the remaining amount to the Traveling agency that will process our flight and hotel reservation ???
If i may ask, how long have you been doing this Nanny Job? Could you please tell me more about yourself.Hoping to read from you soon.
FIRST EMAIL HEADER:
|Received-SPF:||pass (domain of comcast.net designates 18.104.22.168 as permitted sender)|
|X-YMailISG:||w9HZbUMWLDugWjkkZVsrVFrnt7mKBiRe4Vhr7H2aTzOySAlE H.NzpX2wkMNQ8Xj0s4FKAxYIFHimUsvSofe8irt5SpLJ7kCl0.iPHB0hpVZQ IPbeCPGYVzBAoc.PP9Fa2oHu_OYnHo_mhgu3KaQX_T0_CawHUL68HxmmP.d_ iTGWv_HV8S6J6JbdhfT_IqYhegGBmGOOuOH9o5GRfktQkyKSWNRK7epWy3_T G5WFKshB16gNrwazp.rNmP5L5o0pdbGmReIwiO3VYkX7he1wY01ro8Rc9Cvb 62tUpBl_lz3XSkaJi4wugG8alvxGEqbNNIQPPtUGZ.Cj5ioe7TJHRwTdnhyk hC6p8ufx0zp2o.qNFGLvq98AEzhPrbAzP_1KHg_tcENK2C_fqoBovlX_ax49 u.hRrKNSHOZ8NVxcK4NJVcte1h5VmanH__Gw0HytHBATFWW6NBbSu3xo6nGb 3g6uev2THTULgp1qqRVNxDoku3cT_zFKRm5QpeKHDeGgVFg4tgPWOCV9zfxU AuItab8xCDC79PoEEVSYkQ37RRUiKmTJmBRjmN12yuaLaiXrowCeeNsUeims CsNvZu1ABwxNqEk45o2G2uBaQWXFSlEpziSd_1bN.s1JbyhYrgbJR9kOmrip rWOuLabniTTX8zvT2ZK.TNmeMrwGGzftEWGXSkAFGK1_HSSg9CDnHQ2SDQAd Vbl9zDkYxj_e0ujvB9d4IggGS41FJM_OZunV3xMWqd8LOJjnHYrsq3Nod.1_ RvGRf0FpugGJLA1hUByUD8iJMjaeogGZ.eRhwCU.6R8vtuzepaCXAkOSrWcK 75BXu80hjtCgz.Oh84A9yDZ_W7LFDbjzCuWb7zDUozaM5fe_klf2yvwjSpcS gpzH5AROIOBEQNRKhPAF.i5zIGfooLzo5xbcZ0vOQ1u0xAWZLt_erCUj2OPQ pRSvpdDh0FHvEf9FjBQyxePbToRxBktm0Ypx7BrPzJ0hVWFCiGqK01DclztT oeihGZaNU5CcPx0SjaCR7k6WlIEUmq7THpO8d4I_3UxoWrISske9RpParcah _pHDuPE.1iqvtVROeq22QKRgyhEQ_dc_9yC_dqiJ89DFfBhBpE37zltXxBj0 vh_qdKRop5SgL043x03wwUNmp3g.sM3sgatKFZxgBHvfB3uap6Whl3XgkbLY VN4-|
|Authentication-Results:||mta1284.mail.sk1.yahoo.com from=comcast.net; domainkeys=neutral (no sig); from=comcast.net; dkim=neutral (no sig)|
|Received:||from 127.0.0.1 (EHLO qmta01.emeryville.ca.mail.comcast.net) (22.214.171.124) by mta1284.mail.sk1.yahoo.com with SMTP; Mon, 22 Oct 2012 05:10:11 -0700|
|Received:||from omta15.emeryville.ca.mail.comcast.net ([126.96.36.199]) by qmta01.emeryville.ca.mail.comcast.net with comcast id EBuy1k0051Y3wxoA1CAAvE; Mon, 22 Oct 2012 12:10:10 +0000|
|Received:||from sz0115.ev.mail.comcast.net ([188.8.131.52]) by omta15.emeryville.ca.mail.comcast.net with comcast id ECAA1k0012xZMJ48bCAA20; Mon, 22 Oct 2012 12:10:10 +0000|
|Date:||Mon, 22 Oct 2012 12:10:09 +0000 (UTC)|
Anthony Webb <email@example.com>
|Subject:||Babysitter/Nanny needed ASAP!!!|
|X-Mailer:||Zimbra 6.0.13_GA_2944 (ZimbraWebClient – SAF3 (Win)/6.0.13_GA_2944)|
SECOND EMAIL HEADER:
|Authentication-Results:||mta1236.mail.sk1.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)|
|Received:||from 127.0.0.1 (EHLO nm11-vm8.bullet.mail.gq1.yahoo.com) (184.108.40.206) by mta1236.mail.sk1.yahoo.com with SMTP; Sat, 24 Nov 2012 02:24:38 -0800|
|Received:||from [220.127.116.11] by nm11.bullet.mail.gq1.yahoo.com with NNFMP; 24 Nov 2012 10:24:37 -0000|
|Received:||from [18.104.22.168] by tm5.bullet.mail.gq1.yahoo.com with NNFMP; 24 Nov 2012 10:24:37 -0000|
|Received:||from [127.0.0.1] by omp1019.mail.gq1.yahoo.com with NNFMP; 24 Nov 2012 10:24:37 -0000|
|Received:||(qmail 12919 invoked by uid 60001); 24 Nov 2012 10:24:37 -0000|
|DKIM-Signature:||v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1353752677; bh=m8e9F3qHYKdizTVN5ph85YVx6rmvOCdnmbQ9U3smpxI=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=S/E5qZedIlygps6BxSAV3xP76gx4+Wp4skHc3ZhovvTrvAhrFcN5/ftirXMYf2F0jcbkFgqIJfsbmsDLe0Ne1BrOXPdbw2AyDMYjnzO0zfZ4o89ql/V7QpcuFik4+DB/xgfO7Gv0jXfA7/KwWzDAFwzJgJIRp1GvZfj4f4jRDE0=|
|DomainKey-Signature:||a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=CiLyc+ZGeJXRcB5z7ZUp0CdW/QVmSn2XNOmw+ii45tVn+kZJBb8PZCC71CCUR/3VUL9+eApxuF22ZSbdotnuAvWo2uZbI4Q1DLcVU97Eyipy9ucqTazWVLIGsvO+kFJllXQcd2kkjFfHJbKOvPI1m6Puq9YvaHUQiZwpNtsY0yM=;|
|X-YMail-OSG:||QXhD4koVM1kSdwuTlzTZ07kQ3UHiqUmfNzMsviXi_c_5uTv Djjn8R226sV1KgngZRKwoNXxF8zyE3k4EkICD9.eB8.WMx0z9Bqpj2jVIzHA 4kELxh_2q3LJY8L6mOBN5dg4jQPY.jClqcEAtVKwuKrivYHDYte_9rUIMQGS bBxHw1Up1ZiJOTOYoaDVPCf4KaSS0MPDUgzMRFHtwheMr5mzaF9BEqw0Vnji H63iOQcZZz8RssS.nYBtBrpBsoj.RJBpGxddIpnMJ8kV4rB3Si1IGX7hFMlk lL2avU7y7JfQYvZQVfKpRh_e4ak8sG5L2M6MaOoyyrhihuuBeyRzA_.j0YWz 6HeO.XIIApfDTVC0xPivmRuDgSDPsdRjcaAc4rvFeryOT6Q8M_OmMoQo6fTF UXsliob_VwKRvHvw27qlnKlHvSssCKoXWNkg94u4PzcIG9Y4WYbMVdUU5zz5 7zBUJGfkEiOJEVV.WBPasyMoS0Atateg-|
|Received:||from [22.214.171.124] by web164001.mail.gq1.yahoo.com via HTTP; Sat, 24 Nov 2012 02:24:37 PST|
|Date:||Sat, 24 Nov 2012 02:24:37 -0800 (PST)|
|From:||Anthony Webb <firstname.lastname@example.org>|
|Reply-To:||Anthony Webb <email@example.com>|
|Subject:||Re: Babysitter/Nanny needed ASAP!!!|
126.96.36.199 <> 188.8.131.52 <> 184.108.40.206 <> mta1284.mail.sk1.yahoo.com <> nm11-vm8.bullet.mail.gq1.yahoo.com <> firstname.lastname@example.org <> email@example.com <> 220.127.116.11 <> 18.104.22.168
Received from: from sz0115.ev.mail.comcast.net ([22.214.171.124]) by omta15.emeryville.ca.mail.comcast.net with comcast id ECAA1k0012xZMJ48bCAA20; Mon, 22 Oct 2012 12:10:10 +0000
Anthony Webb <firstname.lastname@example.org> <email@example.com>