John Morris

Okay, this isn't the first one of these that I've seen. I posted a response to another topic (Personal Assistant) about someone claiming to be Eric Nesbit. Starting this for anyone who receives email from a John Morris.
As you can see from the header info below, it simply said "Make $500." You know, the least they could do is put a little more effort into the scam and tell me what they were expecting me to do. At least they put a lot of effort into the header.

Anyway, if someone else receives an email from John Morris, feel free to add to this post.


********************Start Header Info*******************************
Delivered-To: Email Address Removed
Received: by 10.64.39.133 with SMTP id p5csp61060iek;
Thu, 24 Jan 2013 20:13:24 -0800 (PST)
X-Received: by 10.224.101.68 with SMTP id b4mr4515095qao.29.1359087198257;
Thu, 24 Jan 2013 20:13:18 -0800 (PST)
Return-Path: <[email protected]>
Received: from bosmailout19.eigbox.net (bosmailout19.eigbox.net. [66.96.190.19])
by mx.google.com with ESMTP id k13si8773056qct.103.2013.01.24.20.13.17;
Thu, 24 Jan 2013 20:13:18 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates 66.96.190.19 as permitted sender) client-ip=66.96.190.19;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 66.96.190.19 as permitted sender) [email protected]
Received: from bosmailscan10.eigbox.net ([10.20.15.10])
by bosmailout19.eigbox.net with esmtp (Exim)
id 1TyafF-0007IH-Qw
for Email Address Removed; Thu, 24 Jan 2013 23:13:17 -0500
Received: from bosimpout04.eigbox.net ([10.20.55.4])
by bosmailscan10.eigbox.net with esmtp (Exim)
id 1TyafF-00022P-8E
for Email Address Removed; Thu, 24 Jan 2013 23:13:17 -0500
Received: from boscgi0201.eigbox.net ([10.20.12.21])
by bosimpout04.eigbox.net with NO UCE
id s4DH1k0020TEmyJ014DH5J; Thu, 24 Jan 2013 23:13:17 -0500
X-Authority-Analysis: v=2.0 cv=U9cQ/JXu c=1 sm=1 a=Cfmvr559m00A:10
a=nDghuxUhq_wA:10 a=pGLkceISAAAA:8 a=QPcu4mC3AAAA:8 a=p-GTllC3aa4A:10
a=40yn-0uKPCQgljpS27gA:9 a=+gvtqRQVAb43z604rcJL1w==:117
X-EN-OrigOutIP: 10.20.12.21
X-EN-IMPSID: s4DH1k0020TEmyJ014DH5J
Received: from ipw.traverse11 by boscgi0201.eigbox.net with local (Exim)
id 1Tyae8-0000Fy-ME
for Email Address Removed; Thu, 24 Jan 2013 23:12:08 -0500
X-EN-Info: U=ipw.traverse11 P=/wp-admin/mailaaa.php
X-EN-CGIUser: ipw.traverse11
X-EN-CGIPath: /wp-admin/mailaaa.php
X-EN-OrigIP: 41.206.1.1
Message-Id: <[email protected]>
To: Email Address Removed
Subject: Employment**
From: john morris <[email protected]>
Reply-To:
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: 8bit
X-EN-Timestamp: Thu, 24 Jan 2013 23:12:08 -0500
Date: Thu, 24 Jan 2013 23:12:08 -0500
Sender: john morris <[email protected]>

Make $500

*****************************End Header Info*****************************************

Why is it they're only offering me $500? At 52 weeks a year that's only $26k per year before taxes. I think we're worth more than that don't you? Wait or is that only a one off. I work one week, get my $500 and then I'm no longer an employee. That's kinda dirty...


Regards,

Mental Drow

Oh, just went back to the list of all my email and noticed that when you look at it the name in the "From" area it says "john morris" but if you mouse over (put your mouse cursor over the name but don't click it), it says Tony curtis. I don't know about anyone else, but that's a clear sign to me of a scam. And the Grammar... I don't know what they're teaching these scammers, but don't you know you're supposed to capitalize the first letters of your First (Middle inital/name) Last name? Unless their parents actually had the birth certificate completed this way.

At any rate, I'm going to see if a Tony Curtis (opps Tony curtis) shows up in the forums here.