connordxss87k@gmail.com

[Big Al]

Ok


Connect this number
+639475844520

Header:

Return-Path: <connordxss87k@gmail.com>
Received: from mail-sor-f65.google.com (mail-sor-f65.google.com. [209.85.220.65])
From: asxsd sds <connordxss87k@gmail.com>
Date: Sun, 29 Mar 2020
Subject: Re: N95 Masks

Or This website

https:/ /www.globalmasksuppliers.com/products

Phone:
+639475844520
Number billable as mobile number
Country or destination Philippines
City or exchange location
Original network provider* Smart Communications

[Big Al]

yes buy this website

[Big Al]

Dear Mr,
Thanks for making your inquiry. Due to the global demand, unfortunately we Available Stock 15,000 Boxes. Price and payment terms is listed below,

Disposable Earloop Face Mouth Masks 3 ply ( Wholesale )
Place of Origin: Germany, Poland
Brand Name: OEM
Model Number:8210
Color:Yellow, Blue
Price= 50Pcs = $4.5 USD / Box
Price includes Shipping.
MOQ = 1000 Boxes

3M N95 Face Mask ( Wholesale )

( N95 8210 Face Mask ) .
20pcs in 1 box
Price = 1 box = US $15.5 USD
rice include Shipping.
MOQ = 500 Boxes


Shipped from which country: Philippines
Delivery Schedule: After payment received, !!! Shipping 3 to 5 days maximum by Air Cargo.
> Payment: 30% advance on confirmation and 70% against Airway Bill Tracking number.
> We accept payments through Bank Transfer, Western Union. Bitcoin accepted

It would be great to secure the first batch, and then you can let me know what you need going forward. We do have multiple suppliers we can use to increase the weekly supply, if need be.

Please let me know if there is anything else you need, or I can assist with.

All the best
Tan Valery
Whatsapp: +63 947 584 4520

Header:

Delivered-To:
Received: by 2002:a05:6214:430:0:0:0:0 with SMTP id a16csp590886qvy;
Tue, 31 Mar 2020 00:33:31 -0700 (PDT)
X-Received: by 2002:aca:6184:: with SMTP id v126mr1154066oib.168.1585640011164;
Tue, 31 Mar 2020 00:33:31 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1585640011; cv=none;
d=google.com; s=arc-20160816;
b=Nly11J1VdHR9hG3r+DHh9ZPIHYwBjcDB78J9cdTCwWbQw5b0R2tyknQMGjcC3KDeW7
y8A+883LGekRR0MfxbUwGf0MUHJ1ztfeLIs5ewbtLy+J80A1Ut0b4a7m1zQBZq/L9BEK
wpL4loO54tej2f7ANEPFSYN8fD79SgF0oWLSVViqOFtM5yc1CPfsw0noqovwXVjWvu5b
+i7LscgEH1apPz9txxohyeGRkoRcTJn47aSJ+hjvy8JWz3t3cCBz0p2InqAoHMZJxKvA
degG0GDNIkHm+u+KFiHp9wloNj4eV3iWe4Y27Tz+Y4c9HCVuMdjQFa7TECrYCp+huXm6
cXxQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=to:subject:message-id:date:from:mime-version:dkim-signature;
bh=M+Wm1zNykNUymGvNWXfoGM8uCw4wigtVPSGXoiUY+4Q=;
b=FHb61lF3FoSXxcXDsuv07VvnklKkAmeRWD0D0gxnSL+/BJlMdHuqEe8Kud569QsFJs
pNN4BIcCT9DkRePL9b/ViqdtzIMuU4npO62yhqKnvMLYMWpGnAkv1O5E4ckR67P809wa
PGybdHxdLScQazdfsl/R1yCOBHTPm4k8l/saWaQ6I5scrUGbQeNyZqGMbh0/iAkdkg2n
zrHiHtLRhKnEJqOkrTr2/k13bH9b/PRuTiItM0C8eJCc6cIUs9X1wpBmSJjUEypnNbUC
uJcmoXwGskZ3ECjc95ZyWtNEQKhoE62nFDvmLlIDuTGk323QM9ht63ARuQ/lNG1DbLkX
N/1g==
ARC-Authentication-Results: i=1; mx.google.com;
dkim=pass header.i=@globalmasksuppliers-com.20150 ... pssmtp.com header.s=20150623 header.b="Z/5HeZtG";
spf=neutral (google.com: 209.85.220.41 is neither permitted nor denied by best guess record for domain of order@globalmasksuppliers.com) smtp.mailfrom=order@globalmasksuppliers.com
Return-Path: <order@globalmasksuppliers.com>
Received: from mail-sor-f41.google.com (mail-sor-f41.google.com. [209.85.220.41])
by mx.google.com with SMTPS id v1sor6873917otp.128.2020.03.31.00.33.31
for < >
(Google Transport Security);
Tue, 31 Mar 2020 00:33:31 -0700 (PDT)
Received-SPF: neutral (google.com: 209.85.220.41 is neither permitted nor denied by best guess record for domain of order@globalmasksuppliers.com) client-ip=209.85.220.41;
Authentication-Results: mx.google.com;
dkim=pass header.i=@globalmasksuppliers-com.20150 ... pssmtp.com header.s=20150623 header.b="Z/5HeZtG";
spf=neutral (google.com: 209.85.220.41 is neither permitted nor denied by best guess record for domain of order@globalmasksuppliers.com) smtp.mailfrom=order@globalmasksuppliers.com
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=globalmasksuppliers-com.20150623.gappssmtp.com; s=20150623;
h=mime-version:from:date:message-id:subject:to;
bh=M+Wm1zNykNUymGvNWXfoGM8uCw4wigtVPSGXoiUY+4Q=;
b=Z/5HeZtG1xUbfnGABOEaXIVUNbDbYpaaVBYpTz0ZFQPcFXTG3KW8dB6d61QxzgCBBB
6Dyk2SMi9rJylwd3Serfdo1F3iLPp237X5mDV5whmQTvPf0vXiQhE7Ppg3QBKAKD/NMj
G4cmS1u+RPqURpvRYJrTkhABINvwt7rzI0OnoluHqVswqHj8RppFvwU6Fm89BtlvpLP4
vlWap+7ZLDNE6kzkenIt/iljpKFM1iABxMPe2+OPjZKb5LXBm5B1DPlIlvVyHvnzHrvS
ENKiilCSamuqXsdJdJgukL5UP3bz/eAmQANUZLAkab7daDdzw0KU9kmlquoD0HTga0QY
CrUQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:from:date:message-id:subject:to;
bh=M+Wm1zNykNUymGvNWXfoGM8uCw4wigtVPSGXoiUY+4Q=;
b=JbJdXE/bHyrhIovtwNv5ZQMvMDuuXRQfzCJRruVE8nO3kN7/e17Ok1fBFpFVcLhMOG
OjUt2UI3+cSyNabmabdCFdXCKgqG5NKN3yy2ZAlslsVNDPkH3AlHMsVi80Vgew4X/zXV
0cj6+860xwrNG9W68R0uzWtZfW6Io4GjXUF30E1mPu1QmumJoqslyH3vKjLtGaxoWEvL
6h6of2LJEQg3GNkGIJBtZf7IpneHNYw5bkYFDpyTqexdOSp5/VJdIqCF2C9u5PFwnam+
pv8QMm+p+WdAHJJ49y77yJBvAVphHb4z4rFch+pJ76+HOoD0eXmYzhLExbl+T47qcYrt
lVHA==
X-Gm-Message-State: ANhLgQ2ga9E/UI39MOlxdYaO9HHKdX1Hy6G67doaCqqGFgEoAaaP/PN0 GIWmPZjxPVbKrvvMKQchNQboNeagBNdGBD5OYrlHXj4c
X-Google-Smtp-Source: ADFU+vs7iU0pXraLBKkmrIgdEuP7zM263F0wHjxJ0nY3Rkm13gYJmkMftHk3cGf0bjej2ui7A4JnRf348s9vpcB/WTg=
X-Received: by 2002:a05:6830:3151:: with SMTP id c17mr12696710ots.310.1585640010637; Tue, 31 Mar 2020 00:33:30 -0700 (PDT)
MIME-Version: 1.0
From: Tan Valery <order@globalmasksuppliers.com>
Date: Tue, 31 Mar 2020
Message-ID: <CAMfAJ=m_PoJoD+=iTUooLhK9Z0+Beb1KU1MWaqHrAjiH6C+DJA@mail.gmail.com>
Subject: Re: [Global Mask Supplier] limited Stock Available
To:
Content-Type: multipart/alternative; boundary="00000000000093780405a221958b"

--00000000000093780405a221958b
Content-Type: text/plain; charset="UTF-8"

[Big Al]

Price= 50Pcs = $4.5 USD / Box
Price includes Shipping.

Shipped from: Philippines

[Big Al]

Morning ,
Hope you are well.
Please find attached is the invoice.
Please let me know if there is anything else you need.

All the best

Western Union information from the fake invoice:
First Name: Marites
Last Name: D.
Country: Philippines
State: Manila
City: Makati

[Big Al]

Hi ,
Sorry due to lockdown, we accept payment through wire transfer western union.
Bank transactions cannot be process.

hi
hope all is well..
was wondering if you are still interested in the face mask or not

[Big Al]

Hi,
Below you find the bank information.

Bank Name: BDO

Acc Name: C. E. E.
Account number: 00017036XXXX
Swift code : BNORPHMM
Country: philippine
City: makati kamagong

[firefly]

The fraudulent domain name was firstly reported on Watchlist Internet Austria:

Few days later, a similar warning was posted in Germany:

According to the LKA Niedersachsen, fraudsters are currently exploiting the fear of the corona virus to offer health products such as respiratory masks or disinfectants in fake shops that are currently out of stock.

For some weeks now, website operators (e.g. globalmasksuppliers.com, medicalsmilesgmbh.com or pharmacyfirst.com) have been sending targeted emails to individuals, but also to health organizations, to draw attention to their supposed offer. Sometimes they provide real data, such as addresses of reputable online shops, but then link to their own fraudulent fake shops.

SiBa advises caution. Check the sender's email address. Research the internet for reviews of the alleged online shops. Check the website for terms and conditions, payment modalities and imprint. If this information is missing or only prepayment is offered, you should become suspicious. If you have already placed an order, request your money back and file a complaint with the police.

And shortly after, in Switzerland:

Announcement from the Aargau Cantonal Police of March 27, 2020
For fear of the corona virus, many people are increasingly buying medical products (e.g. respirators, disinfectants, etc.), which is why they are already sold out in many places in brick-and-mortar stores and pharmacies. Alternatively, attempts are made to obtain these products in online shops. Fraudsters take advantage of the uncertainty in the population and the increasing demand and supposedly offer various medical products in online fake shops. The goods are never delivered despite payment.

Prevention tips
Research: Search the Internet for experiences with the online shop. In many cases, warnings can already be seen if you enter the name of the online shop (eg globalmasksuppliers.com) and "fake" as a search. If no relevant search results are displayed, this indicates a rather "new" shop, which is why caution is also advised.
Check payment terms and terms and conditions: Search the website of the online shop for payment terms . If you do not find any information about this, this also indicates a dubious shop. If payment terms are listed, also check whether they can actually be used. It must also be checked whether the online shop has terms and conditions. Missing terms and conditions also indicate a dubious shop.
Check imprint: Search the website of the online shop for an imprint. A missing imprint also indicates a dubious shop.
Already ordered - what to do?
Contact your payment service provider and try to cancel the payment or get the amount paid back.
If you have provided credit card details, check whether unlawful debits have been made and have the credit card blocked as a precaution.
File a criminal complaint.

[firefly]

The fake supplier claims to be a business named Global Mask Suppliers and uses a fraudulent website active from the domain name globalmasksuppliers.com.

From the fake website:

Our years of first-hand front-line experience in the market-place plus our know-how in sourcing from manufacturers and traders world-wide — a European Management with Oriental Expertise — provide both suppliers and clients with a reliable partner for a long-term relationship and mutual benefit.The suppliers we exclusively represent deliver high quality products according to the demands of our clients and comply with internationally accepted standards of manufacturing, safety, and environment.

Global+Med Health is a manufacturer and distributes a vast range of medical and surgical products to healthcare institutions and retail markets around the globe. Today Global+Med Industries, Inc. is the largest privately held manufacturer and distributor of healthcare products in the Australia and is leveraging that success in international markets.
we are one of the leading suppliers of disposable hygiene products and protective work-wear, devoted to combining technology and production, through our consistent endeavor and creation, our products are good sell all over the world. Our main products include non-woven products, plastic products and work-wear, which are widely used in hospital, health care, food industrial, laboratory, beauty parlor, daily use etc.

The only contact mentioned on the fake website is an incomplete location:

P Brillantes Road, Zamboanga City, Zamboanga Del Sur

Entry in the aa419 Database of fraudulent websites: https://db.aa419.org/fakebanksview.php?key=143059

From the domain name registration:

Domain Name: GLOBALMASKSUPPLIERS.COM
Updated Date: 2020-02-25
Creation Date: 2020-02-25
Registrar Registration Expiration Date: 2021-02-25
Registrar: Wix.Com Ltd.

This is what the fake supplier website looks like:

[Big Al]

Hi ,
Hope you had a good weekend.
Kindly inform me tomorrow before leaving to the bank in order to confirm the accountant on desk incharge details.