Company Representative scams, Payment Processing scams and other Employment scams.
by vonpaso xlura Mon Apr 08, 2013 4:46 pm
cramerltd.com is a scam domain, and it's dead already. The email whose header that is is certainly a scam email, as well as a spam (unsolicited bulk) email.

John, please do post the body of the email. It might contain information about Cramer that someone else searches for. The header I posted is from Grafton, a fake website that the same scam gang ran some months ago.

... ni los estafadores heredarán el reino de Dios. 1 Cor. 6:10
Advertisement

by rekhabhuhdia Mon Apr 22, 2013 2:07 pm
My wife received a similar mail today with almost the same content

Here are the details.
[replaced my wife's email id with xxx, for obvious reasons.]
Delivered-To: [email protected]
Received: by 10.112.117.193 with SMTP id kg1csp52098lbb;
Mon, 22 Apr 2013 03:19:37 -0700 (PDT)
X-Received: by 10.236.146.176 with SMTP id r36mr16440106yhj.35.1366625977109;
Mon, 22 Apr 2013 03:19:37 -0700 (PDT)
Return-Path: <[email protected]>
Received: from nm2-vm0.access.bullet.mail.mud.yahoo.com (nm2-vm0.access.bullet.mail.mud.yahoo.com. [66.94.237.66])
by mx.google.com with ESMTPS id m28si27580390yha.91.2013.04.22.03.19.35
(version=TLSv1 cipher=RC4-SHA bits=128/128);
Mon, 22 Apr 2013 03:19:37 -0700 (PDT)
Received-SPF: neutral (google.com: 66.94.237.66 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=66.94.237.66;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 66.94.237.66 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]
Received: from [66.94.237.201] by nm2.access.bullet.mail.mud.yahoo.com with NNFMP; 22 Apr 2013 10:19:35 -0000
Received: from [98.138.207.12] by tm12.access.bullet.mail.mud.yahoo.com with NNFMP; 22 Apr 2013 10:19:35 -0000
Received: from [127.0.0.1] by smtp105.biz.mail.ne1.yahoo.com with NNFMP; 22 Apr 2013 10:19:35 -0000
X-Yahoo-Newman-Id: [email protected]
X-Yahoo-Newman-Property: ymail-3
X-YMail-OSG: TXKL0NsVM1kpjIKV5.yVVa6gmFF5Pht650hEIXtdwl73IM6
GqC0pDip_9VE_VTw.cak0s65qMHNdE0254pw.q20N2mBAgs.oynOjp4Uu84v
Y6Xw6u_s2xiMM62HdRofZ_PzWOpmP6LNEA_zYjUtKO8xdVtq5EVVsf3qKjUF
XyzF7bosO1DNP2h0MzEDQTd2SjuPLRlIs3ZjPErtXVgeKCkLDdGMOjBD364c
D4eidvdg.W0axNNMIc.mq1m5bCMOSOmPjewDDKBl2bsA4hPyU2DPnvIA0cpo
kbMtRuSzhCpaEeSLZWaQhTmF5HE_rQUfXu_PZUN9R5clckEaFatRNsjoKmPR
YJh8wwUnCEcdLnKr7TJI9aK4x25F41DKpv2564c7Kb37x15_viQdCkU9.sQb
k0eMssWL37ODWZC9eOFEpoTItpSnBEpQztE5dFQsVlHY-
X-Yahoo-SMTP: XLrTdq.swBAQXMPB2xn545m54aJajTh8UgjQtBnI
X-Rocket-Received: from [98.138.206.38] ([email protected] with plain)
by smtp105.biz.mail.ne1.yahoo.com with SMTP; 22 Apr 2013 03:19:35 -0700 PDT
Date: Mon, 22 Apr 2013 11:20:17 +0000
From: "Elizabeth J. Buckles" <[email protected]>
Organization: Warren General Finance
To: xxx <[email protected]>
Message-ID: <[email protected]>
Subject: Application and Vacancy Information -22.04
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------103673586C14A5"

------------103673586C14A5
Content-Type: text/plain; charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable

=0D=0A
Hello!
We have considered your candidacy for the post of Finance Officer, it=92s s=
uitable for this position. To continue with recruitment procedure you need =
to be trained. In case of successful certification you will obtain an offic=
e position of Customer Finance Officer. Please note that the training is p=
aid (by the company), you will receive =A3 30 for each training lesson(day).
The information about the company and job duties is attached, as well as an=
application form, which should be completed and to be sent to us. The trai=
ning manager is going to contact you after processing your personal informa=
tion, also you will get the training material needed for the first lesson.

P.S. Please pay attention to the accuracy of filling the form.





Sincerely , Elizabeth J. Buckles
HR Department , Warren General Finance
------------103673586C14A5
Content-Type: application/msword;
name="Warren app.doc"
Content-transfer-encoding: base64
Content-Disposition: attachment;
filename="Warren app.doc"
by vonpaso xlura Mon Apr 22, 2013 2:38 pm
Could you post the doc file? That'll help to kill the domain.

... ni los estafadores heredarán el reino de Dios. 1 Cor. 6:10

Who is online

Users browsing this forum: ClaudeBot and 6 guests