Medikit Co., Ltd , [email protected]

Money Mule Scam . Stolen Identity.

The source IP address is 41.203.67.150
Geo-Location Information
Country Nigeria





Medikit Co., Ltd in need of a reliable company or individual in your region to act as our "Account Receivable Agent" between ( Medikit Co., Ltd and its customers in Canada)Please advise if you are interested in partnering with us ([email protected])



Katsuo Takashi
Human Resource Manager
Medikit Co., Ltd






Delivered-To: xxxxxx
Received: by 10.152.10.170 with SMTP id j10csp66568lab;
Fri, 8 Aug 2014 04:18:46 -0700 (PDT)
X-Received: by 10.52.5.40 with SMTP id p8mr6384337vdp.28.1407496725758;
Fri, 08 Aug 2014 04:18:45 -0700 (PDT)
Return-Path: <[email protected]>
Received: from uio.inen.gob.ec (inen.gob.ec. [186.42.186.146])
by mx.google.com with ESMTP id o11si2774369vci.77.2014.08.08.04.18.44
for <multiple recipients>;
Fri, 08 Aug 2014 04:18:45 -0700 (PDT)
Received-SPF: fail (google.com: domain of [email protected] does not designate 186.42.186.146 as permitted sender) client-ip=186.42.186.146;
Authentication-Results: mx.google.com;
spf=hardfail (google.com: domain of [email protected] does not designate 186.42.186.146 as permitted sender) [email protected]
Received: from localhost (localhost.localdomain [127.0.0.1])
by uio.inen.gob.ec (Postfix) with ESMTP id AC9095E83E6;
Thu, 7 Aug 2014 11:38:26 -0500 (ECT)
X-Virus-Scanned: amavisd-new at inen.gob.ec
Received: from uio.inen.gob.ec ([127.0.0.1])
by localhost (uio.inen.gob.ec [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id zw7GyuT76vXA; Thu, 7 Aug 2014 11:38:26 -0500 (ECT)
Received: from [10.132.88.214] (unknown [41.203.67.150])
by uio.inen.gob.ec (Postfix) with ESMTPA id B8D9C68ED1E;
Thu, 7 Aug 2014 10:37:28 -0500 (ECT)
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: Medikit Co., Ltd
To: Recipients <[email protected]>
From: "Katsuo Takashi" <[email protected]>
Date: Thu, 07 Aug 2014 16:32:00 +0100
Reply-To: [email protected]
Message-Id: <[email protected]>

IP Traced Nigerian Money Mule Scam . Medikit . Fake Application .


Fake Application Page 1







Fake Application Page 2










Header Details from medikit fake application:

Delivered-To: xxxxxx
Received: by 10.152.10.170 with SMTP id j10csp223160lab;
Sun, 10 Aug 2014 22:20:37 -0700 (PDT)
X-Received: by 10.70.52.199 with SMTP id v7mr18281739pdo.49.1407734436448;
Sun, 10 Aug 2014 22:20:36 -0700 (PDT)
Return-Path: <[email protected]>
Received: from BAY004-OMC3S18.hotmail.com (bay004-omc3s18.hotmail.com. [65.54.190.156])
by mx.google.com with ESMTPS id gp11si3150277pbd.50.2014.08.10.22.20.35
for xxxxxx
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA bits=128/128);
Sun, 10 Aug 2014 22:20:35 -0700 (PDT)
Received-SPF: none (google.com: [email protected] does not designate permitted sender hosts) client-ip=65.54.190.156;
Authentication-Results: mx.google.com;
spf=neutral (google.com: [email protected] does not designate permitted sender hosts) [email protected]
Received: from BAY180-W66 ([65.54.190.188]) by BAY004-OMC3S18.hotmail.com with Microsoft SMTPSVC(7.5.7601.22712);
Sun, 10 Aug 2014 22:20:34 -0700
X-TMN: [31RpDEFFTtMbsLAQOeEOMm1BB/pXqHmK]
X-Originating-Email: [[email protected]]
Message-ID: <[email protected]>
Return-Path: [email protected]
Content-Type: multipart/mixed;
boundary="_f07b9620-cd55-4a2b-8ac7-36c3e3e6ca43_"
From: Medikit Co Ltd <[email protected]>
To:xxxxxx
Subject: RE: Medikit Co., Ltd
Date: Mon, 11 Aug 2014 05:20:33 +0000
Importance: Normal
In-Reply-To:
<CAMmFnJhJLTMDJ6yjnsYAwWqgHXsyeSdoFgv-x_8BaeMLVwa6Qg@mail.gmail.com>
References:
<[email protected]>,<CAMmFnJhJLTMDJ6yjnsYAwWqgHXsyeSdoFgv-x_8BaeMLVwa6Qg@mail.gmail.com>
MIME-Version: 1.0
X-OriginalArrivalTime: 11 Aug 2014 05:20:34.0280 (UTC) FILETIME=[FA2D7680:01CFB523]

--_f07b9620-cd55-4a2b-8ac7-36c3e3e6ca43_
Content-Type: multipart/alternative;
boundary="_181d06ba-c18c-4161-a752-ffe26e9f2f37_"