Site logo

     


Advert.
Switch to full style
Post up any 419 emails you received. All persons/companies depicted in these emails are either fictitious or have had their identities copied/stolen by the scammers.
Post a reply

info@medicopharmaceutical.com

Sun Mar 22, 2020 12:31 am

Corona Virus Mask Non-delivery scam

Hello thank you for visiting our Pharmacy which is here to satisfy your emergency needs to safe lives. For we can supply your number you are asking for and even more with available discounts. Please get in touch with our sales agent online through WhatsApp to conclude your order thank you.

WhatsApp Number: +447466448880
Direct call: +443301289172

https:/ /www.medicopharmaceutical.com


Header;
Delivered-To:
Received: by 2002:a67:e105:0:0:0:0:0 with SMTP id d5csp2050229vsl;
Sat, 21 Mar 2020 10:34:13 -0700 (PDT)
X-Google-Smtp-Source: ADFU+vtgGM3FbUQ3qhsCMSuTqi9IFEqwObenj5EcjUfqlJxuhz2PebK/S2qwwKaLHMHRYQ/LIPPv
X-Received: by 2002:aa7:9906:: with SMTP id z6mr16500006pff.112.1584812052945;
Sat, 21 Mar 2020 10:34:12 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1584812052; cv=none;
d=google.com; s=arc-20160816;
b=aplXqPKdlT7VKLp8TCCFV6jY9Bg9kcA9ZwlCVJ2AccapOMCmU53Xho9mOUFRJ4svoJ
9CLub0O4jH11ScCYjWkmCnxSGCvNuetTrrzkL4JFVT6EyHNprWI4WSagHyRhTXHyN08p
MFSBwmbib4ccGMlo7n/v2t0kx9Ww5fHhUonp+Rh6fL2H4CaLxoXNjD1PktDNPJIlrYkl
IB/XVyTBAslWMgj3e9Skw0e01JKUsIRrdoEB5kfcWGPNHjOsxhA/jVO7j7vZ09ASDjZv
4ctFX1Te8iYNg8TzYCkrgoIRkCuxbB3FpJ8DqfcFofiB5aQcMh3eO4d0PrugsB/jfUdY
2PEA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=user-agent:message-id:references:in-reply-to:subject:to:from:date
:content-transfer-encoding:mime-version:dkim-signature;
bh=gfT2ktLHB9MnG8+FPxXmw0WvV4U26j8+65eZt4li8s0=;
b=hRhxT9KST7BXdWIk+GzaOS8+JprTwlKoEMA/GwwjOygF6+yASn47VzdkjsQvO+1otK
R1N+XoPkSmSBmyGwKjNZmE8Z7PUkNh7/8g14WQZILf5zcmrVtNTH+cLmJPdRYH1E3GC3
KPI6P9LFJbQ8OL2IgGDep3U29FDICSIvj7qvLMddaDQQhuXyTgmVyVcoumKK89U1A/Xw
jUpP1fk9uVkOh6j2wCysZJzJbPfPqM7hLMaBuBlTpPZgX9bna2VRlGERivHlso6iaY9T
KtuNAkX6JePhsQ+UeKLQVUdBVTuwhtKEXX90cypUZ7xOPkKqiPmd3+TM4ZwS7rPCcibo
4IXw==
ARC-Authentication-Results: i=1; mx.google.com;
dkim=pass header.i=@medicopharmaceutical.com header.s=default header.b=DH1kqu6+;
spf=softfail (google.com: domain of transitioning info@medicopharmaceutical.com does not designate 23.83.209.12 as permitted sender) smtp.mailfrom=info@medicopharmaceutical.com
Return-Path: <info@medicopharmaceutical.com>
Received: from basenji.birch.relay.mailchannels.net (basenji.birch.relay.mailchannels.net. [23.83.209.12])
by mx.google.com with ESMTPS id 62si6834270pjo.111.2020.03.21.10.34.12
for < >
(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Sat, 21 Mar 2020 10:34:12 -0700 (PDT)
Received-SPF: softfail (google.com: domain of transitioning info@medicopharmaceutical.com does not designate 23.83.209.12 as permitted sender) client-ip=23.83.209.12;
Authentication-Results: mx.google.com;
dkim=pass header.i=@medicopharmaceutical.com header.s=default header.b=DH1kqu6+;
spf=softfail (google.com: domain of transitioning info@medicopharmaceutical.com does not designate 23.83.209.12 as permitted sender) smtp.mailfrom=info@medicopharmaceutical.com
X-Sender-Id: interserver|x-authuser|info@medicopharmaceutical.com
Received: from relay.mailchannels.net (localhost [127.0.0.1]) by relay.mailchannels.net (Postfix) with ESMTP id 966ED100F71 for < >; Sat, 21 Mar 2020 17:34:11 +0000 (UTC)
Received: from glo2.globexcamhost.com (100-96-23-19.trex.outbound.svc.cluster.local [100.96.23.19]) (Authenticated sender: interserver) by relay.mailchannels.net (Postfix) with ESMTPA id 00A6E100F3F for < >; Sat, 21 Mar 2020 17:34:10 +0000 (UTC)
X-Sender-Id: interserver|x-authuser|info@medicopharmaceutical.com
Received: from glo2.globexcamhost.com ([UNAVAILABLE]. [209.159.155.171]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384) by 0.0.0.0:2500 (trex/5.18.5); Sat, 21 Mar 2020 17:34:11 +0000
X-MC-Relay: Junk
X-MailChannels-SenderId: interserver|x-authuser|info@medicopharmaceutical.com
X-MailChannels-Auth-Id: interserver
X-Grain-Bitter: 69be320a03901d6e_1584812051359_1046679247
X-MC-Loop-Signature: 1584812051359:1191646359
X-MC-Ingress-Time: 1584812051359
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=medicopharmaceutical.com; s=default; h=Message-ID:References:In-Reply-To: Subject:To:From:Date:Content-Transfer-Encoding:Content-Type:MIME-Version: Sender:Reply-To:Cc:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Id:List-Help: List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=gfT2ktLHB9MnG8+FPxXmw0WvV4U26j8+65eZt4li8s0=; b=DH1kqu6+2LRRZ5BmsLNsLzyb1e BI0UwhOxHleNUoGh64mas8hj71Se8vJpTA1Pnokn2M8PKRy0ybLAl/MPbcAAX51C+Ns1AJI9xmJO6 lUGHlcPUszuTKS3Va+b36HnfUGx9jTxt45TDCs/Ah5R9QkitOWeFZJr/iUI8A157UK0/B4/Nh37c2 EHm/g3PvKvY1FXq46MonXW8YnVJ1Lc4x3LSNJdK70z8/59IiT3QIfJ5ii+oMPRBqj9ulqlZZCJPaC EPKBF6kJ6lgAR7WtW7P/NvdLE6JCGLk/9V5axpP4mKEyA09JVyE8PFb5NsXVm7MfiRGq6xSTa5fdy HkAMksGQ==;
Received: from [::1] (port=54474 helo=glo2.globexcamhost.com) by glo2.globexcamhost.com with esmtpa (Exim 4.93) (envelope-from <info@medicopharmaceutical.com>) id 1jFi0f-002m3C-6C for ; Sat, 21 Mar 2020 13:34:09 -0400
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII; format=flowed
Content-Transfer-Encoding: 7bit
Date: Sat, 21 Mar 2020
From: info@medicopharmaceutical.com
To:
Subject: Re: N95 Masks
In-Reply-To: <CAEVhzYUruNG5pGDSLqk62X3x7i8ThXU+tWGxtt-x6igivHGuJQ@mail.gmail.com>
References: <CAEVhzYUruNG5pGDSLqk62X3x7i8ThXU+tWGxtt-x6igivHGuJQ@mail.gmail.com>
Message-ID: <a3973651068e4cf6f07278ee8df3dab2@medicopharmaceutical.com>
X-Sender: info@medicopharmaceutical.com
User-Agent: Roundcube Webmail/1.3.8
X-OutGoing-Spam-Status: No, score=-1.0
X-AuthUser: info@medicopharmaceutical.com


Phones:
+447466448880
Number billable as mobile number
Country or destination United Kingdom
City or exchange location
Original network provider* Lycamobile UK Limited

+443301289172
Number billable as national geographic number
Country or destination United Kingdom
City or exchange location

info@medicopharmaceutical.com

Sun Mar 22, 2020 5:14 pm

All good, our 3M N95 Safety Face Masks Respirators cost $10 for a pack of 10 pieces. For your order, we will deliver a pack for $3 each. Hence, 50,000 pieces will equal 5000 packs where each pack is made up of 10 pieces.
When you are ready then send your company informations to prepare your shipping invoice. Thank you.

Medico-pharmaceutical<
https:/ /www.medicopharmaceutical.com

info@medicopharmaceutical.com

Tue Mar 24, 2020 12:22 am

Below is your invoice to conclude delivery.
Take note that 30% W/T (Wire Transfer) down payment is to help seller meet up with shipment or transportation expenses to buyer. This might include: inland transportation charges, inland taxes,cargo load, inspection, final packaging, port to port, transportation charges etc..


Image

Image


Bank account details from the fake invoice:
TW ACCOUNT NAME........................IBRAHIM T.
IBAN..............................DE32 7001 1110 6057 XXXXXX
BANK CODE (SWIFT/BIC) ..................DEKTDE7GXXX
BANK.........................................................Handelsbank ZIPCODE....................................................80687
ADDRESS..................................................Munchen, Germany

Re: medicopharmaceutical.com

Tue Mar 24, 2020 6:55 am

The fake supplier claims to be a company named Medico Pharmaceutical and uses a fake website active from the domain name medicopharmaceutical.com.

From the fake website:

At Medico-Pharmaceuticals, we have a large stock of mask wear to fight against the coronavirus and other contagious diseases. With a mission to create an atmosphere for easy access and purchase of our preventive products at affordable rates to save humankind.
Medico-Pharmaceuticals is the number one source for surgical face masks and related products. It is our goal to provide you and your staff with the highest quality of personal protection products and service solutions


Contact details:

Headquarter
New York, NY 10160
Whatsapp +447466448880
info@medicopharmaceutical.com


New York is in this case in Duala, Cameroon.

Entry in the aa419 Database of fraudulent websites: https://db.aa419.org/fakebanksview.php?key=142844.

From the domain name registration:

Domain Name: MEDICOPHARMACEUTICAL.COM
Updated Date: 2020-03-11
Creation Date: 2020-03-11
Registrar Registration Expiration Date: 2021-03-11
Registrar: NetEarth One, Inc.

Registry Registrant ID: Not Available From Registry
Registrant Name: ngah bowel
Registrant Street: maison blanche
Registrant City: douala
Registrant State/Province: littoral
Registrant Postal Code: 237
Registrant Country: CM

Registrant Phone: +237.690480438
Registrant Fax Ext:
Registrant Email: ngah6560@gmail.com

This is what the fake website looks like:

medico.JPG

info@medicopharmaceutical.com

Wed Mar 25, 2020 11:15 pm

Hello good day,
The amount due for payment in dollar cost $4,500 which equates to €4,185 (depending on present exchange rates). Given that our company is in Europe, you will pay the amount due in Euros as stipulated in your invoice. So immediately you effect payment, send us a receipt of confirmation and we immediately proceed with the shipping process of your goods. Thank you

https:/ /www.medicopharmaceutical.com

medicopharmaceutical8@gmail.com

Sat Mar 28, 2020 7:44 pm

Hello good day.
We have waited for your feedback without any response from you. Our business email has a little fault which is in the process of correction. This is to confirm your order which has been kept pending for confirmation of delivery. Please get back to us with feedback as soon as possible. Thank you.


>>Medico-pharmaceutical<<


Header:

Return-Path: <medicopharmaceutical8@gmail.com>
Received: from f17.my.com (f17.my.com. [185.30.177.41])
Sat, 28 Mar 2020
From: medicopharmaceutical8@gmail.com
Subject: Awaiting Order confirmation

medicopharmaceutical8@gmail.com

Sun Mar 29, 2020 4:03 pm

Thank you for your reply.
Your order had been kept on the waiting to be canceled after a week of non-compliance. To prepare for shipping please do the part payment of 30% ($4,500) (€4,050) to handle your shipping charges.
Send a confirmation of payment receipt after payment has been made so your order can be placed active as soon as possible. Thank you.

>>Medico-Pharmaceutical<<

medicopharmaceutical8@gmail.com

Mon Mar 30, 2020 9:18 pm

Hello good day, we are sorry for the inconveniences caused. Please bear with us as we will send you another account from one of our distribution centers within a moment to finalize your payment. Thank you


Hello due to the lockdowns in Germany and other places it affected some bank transactions. Below is our alternative bank account at one of our production centers in China. Please do the payment and communicate the confirmation receipt of payment to enable us begin shipping preparations immediately. Thank you.

Account Name: H. J.
Surname: H.
Name: n. j.
Account: Acc Number: 622827008125855XXXX
Bank: Agricultural Bank of China Guangdong Branch
SWIFT: ABOCCNBJ190
Address: , Panyu City.

>>Medico-Pharmaceutical<<


Hello greetings. I hope everything went on successfully since the other account had an issue. The management apologizes again for the inconveniences caused. Please keep us updated immediately you are done to prepare your order as it’s now on priority for delivery upon confirmation from your bank. Than you.


>>Medico-Pharmaceutical<<
Post a reply