Advert.

Do NOT tell your scammer he is posted here, or report their accounts as it puts others at risk!

info@reduzakozmetic.com

Post up any 419 emails you received. All persons/companies depicted in these emails are either fictitious or have had their identities copied/stolen by the scammers. Emails posted by staff are received unsolicited to their "catcher" accounts.

info@reduzakozmetic.com

Unread postby Big Al » Wed May 13, 2020 6:10 pm

Greetings,
thanks for your inquiry and hope this message reaches you in good health . In regards to your inquiry , please tell us which brand of hand sanitizers do you need?


Regards,


Paris Akson.



Header:

Delivered-To:
Received: by 2002:a0c:b506:0:0:0:0:0 with SMTP id d6csp742628qve;
Wed, 13 May 2020 07:30:49 -0700 (PDT)
X-Google-Smtp-Source: APiQypJYZPkp86/DET9FgLiDVejBeCyTRMtuc2tv2KlvsvUBzBGJShpPO0jTIYyRb20GFuI7UCiI
X-Received: by 2002:aca:d955:: with SMTP id q82mr20189687oig.76.1589380249877;
Wed, 13 May 2020 07:30:49 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1589380249; cv=none;
d=google.com; s=arc-20160816;
b=kZttQ/SyTGv71HgpbdVtLduQ7fhsZfoziy2jvvvB8NTceJhr4w+wd07hbx4NDMBGL9
xr7Tv+FmKJQJM2Ti/HbFLPOWSvvmJbClO8wGviaySwlSvAnG+QUjlBBbmjEnFoAdr+bi
c/VQ5EIWvWRauFV9a+E9jyCnuaxK1hBpmjr800mMWSoGK0yS6+GbWvgcmgdgkB0hO+A/
2zXhIB6EVvLGtygLGc5Ci48Or2AcouA8+TNxFjj0Lcbk1Mj9mfAh4Dqv0TufRd5VFDgR
Fn1rPNxjKdCRo9AuyTo6H7fb4dddBDxNwBCfIXWROBSunr201ub9lWgmOHu5xfXQfLWN
ACbg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=user-agent:message-id:references:in-reply-to:subject:to:from:date
:content-transfer-encoding:mime-version:dkim-signature;
bh=n2jTaICsYfK7a3m45bC3QDZuMMAbqR541LNfXdRHIuE=;
b=FrC1pLpWZLWWnMzem5B7Cs7XC3gDt4LqbQfCfIAUslYNU6k5BmSuMwZoojjA4PbZnl
nlsBA20trgEwQgBBKpoH6ac46EdC2/m4zeoSQ14dDYZ/qgM3HEOFDVYK9pJsLkQJWDrm
TlAn3fk+8WFYuSjXKbLpkgyqL9s8yt1WOMrNiWIsUhhLGn+aN0aF2ctAKbLAmwbLZDlh
WcQfO6/PkGvDXz0zeMYjbsKVldQyK4KDJSC0g575nrJ0APiLdh6XM+jVfXjTzdnNvIf2
4xz6Uw02bQ6Zs137ejD/0NujBj5+VgeJX3zl7O+oE+H+NfQVRSYVTbbP34m8tysB6m0M
bNzQ==
ARC-Authentication-Results: i=1; mx.google.com;
dkim=pass header.i=@reduzakozmetic.com header.s=default header.b=ba8Ks0yh;
spf=pass (google.com: domain of info@reduzakozmetic.com designates 173.237.185.96 as permitted sender) smtp.mailfrom=info@reduzakozmetic.com
Return-Path: <info@reduzakozmetic.com>
Received: from rex.vivawebhost.com (rex.vivawebhost.com. [173.237.185.96])
by mx.google.com with ESMTPS id v9si10699125oig.263.2020.05.13.07.30.49
for < >
(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);
Wed, 13 May 2020 07:30:49 -0700 (PDT)
Received-SPF: pass (google.com: domain of info@reduzakozmetic.com designates 173.237.185.96 as permitted sender) client-ip=173.237.185.96;
Authentication-Results: mx.google.com;
dkim=pass header.i=@reduzakozmetic.com header.s=default header.b=ba8Ks0yh;
spf=pass (google.com: domain of info@reduzakozmetic.com designates 173.237.185.96 as permitted sender) smtp.mailfrom=info@reduzakozmetic.com
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=reduzakozmetic.com; s=default; h=Message-ID:References:In-Reply-To:Subject: To:From:Date:Content-Transfer-Encoding:Content-Type:MIME-Version:Sender: Reply-To:Cc:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Id:List-Help: List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=n2jTaICsYfK7a3m45bC3QDZuMMAbqR541LNfXdRHIuE=; b=ba8Ks0yhBWe0pJmlZE/hZaYOzD m8UtDK9rsHV1c6tVIL1QrAw0wVzd8tnr3jnKWrrwjd+c+Tx3Sfwbw2GJ7mFQAmrQlQ4xZrnRi/S0L Tu5sLTy4RizYOAf+euRCsvKmw4W3YJu/Vt1jltN2BdlWVyNPCHQwzUJ9mCrYTm6P6GNbYZyjRo62m KIroZ/Zj+u/zUE0l1cKF6Dl8pNnuRPe0vBuDCuB9lNZJ14pj2Lmjo9xYZG4X37ZqDJAnd0bubFoX/ bsp/VNNbvKVTPpX/IyUce2ThOJr8wZGJDhf0OPsI/uDAmVpdDnKOJO6tnCzao7O8HShhyFj8CA3ir X6538/0Q==;
Received: from [::1] (port=59822 helo=rex.vivawebhost.com) by rex.vivawebhost.com with esmtpa (Exim 4.93) (envelope-from <info@reduzakozmetic.com>) id 1jYsPJ-000344-EI for ; Wed, 13 May 2020 10:30:49 -0400
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII; format=flowed
Content-Transfer-Encoding: 7bit
Date: Wed, 13 May 2020 10:30:49 -0400
From: info@reduzakozmetic.com
To:
Subject: Re: Hand Sanitizer.
In-Reply-To: <CAF_jvR8MJjk2PVSWvfzNd3uejyZ44ZmV-z=wuBxse9Vb4Bw_bQ@mail.gmail.com>
References: <CAF_jvR8MJjk2PVSWvfzNd3uejyZ44ZmV-z=wuBxse9Vb4Bw_bQ@mail.gmail.com>
Message-ID: <34f76af873ececdff8c96dbeacf3608b@reduzakozmetic.com>
X-Sender: info@reduzakozmetic.com
User-Agent: Roundcube Webmail/1.3.8
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - rex.vivawebhost.com
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - reduzakozmetic.com
X-Get-Message-Sender-Via: rex.vivawebhost.com: authenticated_id: info@reduzakozmetic.com
X-Authenticated-Sender: rex.vivawebhost.com: info@reduzakozmetic.com
"Look for the lies."
Being Blackmailed? Go here and do this first: https://blackmailscams.com/
The information you supply can help others from becoming Victims.
Image
User avatar
Big Al
"Little pee nut" admin.
 
Posts: 84975
Joined: Fri Apr 27, 2012 10:48 pm

info@reduzakozmetic.com

Unread postby Big Al » Thu May 14, 2020 2:12 pm

Hello ,
please visit our website and fill in the order form . We have purell available on our website , fill in your delivery info and order to proceed with payment.


Regards,

Maistri V.
"Look for the lies."
Being Blackmailed? Go here and do this first: https://blackmailscams.com/
The information you supply can help others from becoming Victims.
Image
User avatar
Big Al
"Little pee nut" admin.
 
Posts: 84975
Joined: Fri Apr 27, 2012 10:48 pm

info@reduzakozmetic.com

Unread postby Big Al » Fri May 15, 2020 3:29 pm

Hello ,
I will help you out to place your order. please send us your delivery info again.

Thank You,

Paris Akson


Greetings,
thank you for your confirmation 7.5oz purell will be 2.5USD per piece including shipping and tax and our minimum order quantity is 5000 piece since we do only wholesales. Delivery is via express air cargo. So if you decide to place your order with us , please do not hesitate to contact us .

Best Regards,
Paris Akson.
"Look for the lies."
Being Blackmailed? Go here and do this first: https://blackmailscams.com/
The information you supply can help others from becoming Victims.
Image
User avatar
Big Al
"Little pee nut" admin.
 
Posts: 84975
Joined: Fri Apr 27, 2012 10:48 pm

info@reduzakozmetic.com

Unread postby Big Al » Sat May 16, 2020 4:08 pm

Greetings ,

Thank you for your confirmation , we shall send you proforma invoice for pieces which will come packed in cases .payment will be with moneygram to quickly process your order.

Thank you for your business ,

Maistri V.



Good morning dear ,
hope you and your family are safe and healthy! Please find attached to this email the proforma invoice for your order alongside bank details to proceed with payment for your order.


Thank you and looking forward to read from you,

Paris Akson.


Image


Sender information from the fake invoice:
info@reduzakozmetic.com
REDUSA KOZMETIK SAN VE TIC LTD
Stiaydninli - Kosb Mah. Tuzla Kımya Sanayıcılerı OSB
ATOM CD.NO 2 34956 TUZLA/Turkey
Tel;+48732100450
Number billable as mobile number
Country or destination Poland
City or exchange location

Bank account from the fake invoice:
Bank name:YAPI KREDI
Bank code : (SWIFT / BIC)YAPITRISXXX
IBAN: TR600006701000000080XXXXXX
Account Holder : M. A.
Address:
Branch Code:446
"Look for the lies."
Being Blackmailed? Go here and do this first: https://blackmailscams.com/
The information you supply can help others from becoming Victims.
Image
User avatar
Big Al
"Little pee nut" admin.
 
Posts: 84975
Joined: Fri Apr 27, 2012 10:48 pm

Reduza Kozmetik - reduzakozmetic.com

Unread postby firefly » Sun May 17, 2020 12:08 am

The scammers are targeting victims on LinkedIn:

linkedin.JPG


The fake supplier pretends to be a company named Reduza Kozmetik, using a fraudulent website active from the domain name reduzakozmetic.com.

From the fake website:

Established in 2009, we are a professional company who has nearly 10 years experiences engaged in the research, development, sales and service of hygiene and Skincare products for health care industry and consumer use.
With good reputation our products are selling well in china and exporting the United States and European countries. We also welcome OEM and ODM orders. Whether you are selecting a current product from our catalog or seeking engineering assistance for your application, you can talk to our customer service center about your sourcing requirements.


Contact details:

Stiaydninli - Kosb Mah. Tuzla Kımya Sanayıcılerı OSB ATOM CD.NO 2 34956 TUZLA/Turkey
info@reduzakozmetic.com


Entry in the aa419 Database of fraudulent websites: https://db.aa419.org/fakebanksview.php?key=143689.

Domain Name: REDUZAKOZMETIC.COM
Updated Date: 2020-04-09
Creation Date: 2020-04-06
Registry Expiry Date: 2021-04-06
Registrar: NameCheap, Inc.
Domain Status: addPeriod

Registrant Name: WhoisGuard Protected
Registrant Organization: WhoisGuard, Inc.

This is what the fake website looks like:

main.JPG
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 70956
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

info@reduzakozmetic.com

Unread postby Big Al » Sun May 17, 2020 4:46 pm

Hello
Thank you for the updates and hope you are doing fine. I will send you another bank info with a new Invoice.

Regards,

Paris Akson.
"Look for the lies."
Being Blackmailed? Go here and do this first: https://blackmailscams.com/
The information you supply can help others from becoming Victims.
Image
User avatar
Big Al
"Little pee nut" admin.
 
Posts: 84975
Joined: Fri Apr 27, 2012 10:48 pm

info@reduzakozmetic.com

Unread postby Big Al » Mon May 18, 2020 9:40 pm

Greetings,
hope this message reaches you in good health! please find attached this email a new invoice with new bank details.

Thank you for your business!

Paris Akson.


Image


Shipper information from the fake invoice:
info@reduzakozmetic.com
REDUSA KOZMETIK SAN VE TIC LTD
Stiaydninli - Kosb Mah. Tuzla Kımya Sanayıcılerı OSB
ATOM CD.NO 2 34956 TUZLA/Turkey
Tel:0090-5396223247
+905396223247
Number billable as mobile number
Country or destination Turkey
City or exchange location
Original network provider* Turkcell Iletişim Hizmetleri AŞ


Bank account from the fake invoice:
Bank name :iş bankası bank
Account name: H. C.
IBAN number :TR 22 0006 4000 0021 3670 XXXXXX
Account Number:70041750
Swift Code:: lSBKTRISXXX
Bank Adress :Okmeydani subesi Istanbul turkey
"Look for the lies."
Being Blackmailed? Go here and do this first: https://blackmailscams.com/
The information you supply can help others from becoming Victims.
Image
User avatar
Big Al
"Little pee nut" admin.
 
Posts: 84975
Joined: Fri Apr 27, 2012 10:48 pm

info@reduzakozmetic.com

Unread postby Big Al » Tue May 19, 2020 9:01 pm

Dear ,
I am really sorry to hear that and wish you full recovery.However,once you make the payment , send us the transfer payment slip for confirmation and we shall immediately process your order and send you tracking number and Airwaybill.


Best Regards,

Paris Akson.
"Look for the lies."
Being Blackmailed? Go here and do this first: https://blackmailscams.com/
The information you supply can help others from becoming Victims.
Image
User avatar
Big Al
"Little pee nut" admin.
 
Posts: 84975
Joined: Fri Apr 27, 2012 10:48 pm

info@reduzakozmetic.com

Unread postby Big Al » Wed May 20, 2020 9:53 pm

Hello
sad to hear that you are not still feeling well , but you should not wish or think negatively about your health.Please try to keep positive thoughts in your mind and I guarantee you that it shall be well with you. Regarding the payment , I have a more easier and better solution , I can direct you online to purchase bitcoins, and once you have the bitcoins, I will send you my bitcoin wallet which will take just few minutes to make the transaction.So tomorrow morning I can proceed with shipment. If that sounds good to you , let me know .


Sincerely,

Paris Akson.
"Look for the lies."
Being Blackmailed? Go here and do this first: https://blackmailscams.com/
The information you supply can help others from becoming Victims.
Image
User avatar
Big Al
"Little pee nut" admin.
 
Posts: 84975
Joined: Fri Apr 27, 2012 10:48 pm

reduzakozmetics@enterprise1spl.com

Unread postby Big Al » Thu May 21, 2020 9:35 pm

Hello
hope you are doing well. We will like to know if you received our last email regarding the bitcoin payment option?

Thank you ,


Paris Akson.



Header:

Delivered-To:
Received: by 2002:a0c:85a1:0:0:0:0:0 with SMTP id o30csp182150qva;
Wed, 20 May 2020 22:24:21 -0700 (PDT)
X-Google-Smtp-Source: ABdhPJzTUgkS93tHynuKRctZAGnmT3jNwOxarLr9ZwzcXOb11CVOS9e35Fmr0fAJIWmzlyJQcz//
X-Received: by 2002:ac8:17e6:: with SMTP id r35mr9078456qtk.182.1590038661456;
Wed, 20 May 2020 22:24:21 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1590038661; cv=none;
d=google.com; s=arc-20160816;
b=Jspq3RKZ0NbQmQ7VC/TayA55y3jiJXCdXIbai7GP3Lnh3TrhWEgPMm8Ht1HqtypUXS
CCpCkPWBSXqbMr1PRmpLqno4An3HVQdhhktZMAOt1i7KZY80hlBSSBbG8EulnPsPH5ln
pj1kftOwxIW9lxhuL+cCzuy6BFiQOQQ/cOEe/nU9LCRlRRjB+xesXeu5xYPfrRCHoh/a
sVXoWj+1MvzroPWIssnV7f39tyqrOmKjSJbSUBrVimSG35qVcOxam2ckcpPhU3QFSkiZ
oo6EVa9ZWztJN14we/b77wU7SmIQCRC6diL6+p6ECa10Rw/SgOg4zRRWKlZ4F9tgJab7
nJEg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=user-agent:message-id:subject:to:from:date
:content-transfer-encoding:mime-version:dkim-signature;
bh=8zcgmKlFJ621dFHjMuHVEm5ZP6VBqrBFJusyoNVNBvM=;
b=SK82d2C00X838sVBBlP2KCS9Ks3G0JRO4m9pzCJpXGMNKnnmgWKEffxxzbB32az24t
Rz97ghMkx1OOqPr6v1Muw8jUfi3AGRRPqIwDJKOp/ruWg+o+NyKDk9RwsMUXPA5ws4Kb
wwMeifnk9vQww0j0CK7w8Yb6+WoB1ES85NccR9Sr1gTS0GTXJSbYdz8Fyr3qLdfQFkKY
UVzfj7h0uxhN3njgicR/iEOVuPpeaQ1aXbqRx+y6+z2uNNETLyIIo4nq6TI8uzNIcSqw
2/bIHp2/I1BPW+il9EkV+j+uDhz3qOvDi94KZA9awqt8xlnxVnsra/Eq4UEyWo0v+683
s0Rw==
ARC-Authentication-Results: i=1; mx.google.com;
dkim=pass header.i=@enterprise1spl.com header.s=default header.b=vBp7dCut;
spf=neutral (google.com: 198.54.115.18 is neither permitted nor denied by best guess record for domain of reduzakozmetics@enterprise1spl.com) smtp.mailfrom=reduzakozmetics@enterprise1spl.com
Return-Path: <reduzakozmetics@enterprise1spl.com>
Received: from server204-2.web-hosting.com (server204-2.web-hosting.com. [198.54.115.18])
by mx.google.com with ESMTPS id z44si2652206qth.41.2020.05.20.22.24.20
for < >
(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);
Wed, 20 May 2020 22:24:21 -0700 (PDT)
Received-SPF: neutral (google.com: 198.54.115.18 is neither permitted nor denied by best guess record for domain of reduzakozmetics@enterprise1spl.com) client-ip=198.54.115.18;
Authentication-Results: mx.google.com;
dkim=pass header.i=@enterprise1spl.com header.s=default header.b=vBp7dCut;
spf=neutral (google.com: 198.54.115.18 is neither permitted nor denied by best guess record for domain of reduzakozmetics@enterprise1spl.com) smtp.mailfrom=reduzakozmetics@enterprise1spl.com
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=enterprise1spl.com; s=default; h=Message-ID:Subject:To:From:Date: Content-Transfer-Encoding:Content-Type:MIME-Version:Sender:Reply-To:Cc: Content-ID:Content-Description:Resent-Date:Resent-From:Resent-Sender: Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive;
bh=8zcgmKlFJ621dFHjMuHVEm5ZP6VBqrBFJusyoNVNBvM=; b=vBp7dCut6L9rMPiElN3DBmMYP dSOQOukNY04AEJefXb6oAZUQ4vRFCVSLS0fipNmPXnwYDUqoi1Zjigruo5eFt9hRBSlmGXbtOhAWH 3ThdIEjHyNywL4dnQ3gNjA5XzoYTuuWiAsWYDKR6bj7kK475KdV+ZyzwgGeb91cGZS+2gAD1UCnmc a9499NwnTMbW2sZpl4gXz249SHxciyiZ8hZLXF76lzcrgpeFADughfIn66Rn5pc7xBihLl0eXH+md HD5jMlSvkyPCiJ5JU2CjFLmsuQRiczvSEJFBiGOOv1n9xbsRaoJFXtfxMx5/0z/blg5xujmRtJ7TN 1NlNp4YTg==;
Received: from [::1] (port=57160 helo=server204.web-hosting.com) by server204.web-hosting.com with esmtpa (Exim 4.93) (envelope-from <reduzakozmetics@enterprise1spl.com>) id 1jbdgl-000HPV-Pc for ; Thu, 21 May 2020 01:24:20 -0400
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII; format=flowed
Content-Transfer-Encoding: 7bit
Date: Thu, 21 May 2020
From: reduzakozmetics@enterprise1spl.com
To:
Subject: Greetings from Paris
Message-ID: <95e9539ca98f758f659a317ef11ad816@enterprise1spl.com>
X-Sender: reduzakozmetics@enterprise1spl.com
User-Agent: Roundcube Webmail/1.3.8
X-OutGoing-Spam-Status: No, score=-1.0
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server204.web-hosting.com
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - enterprise1spl.com
X-Get-Message-Sender-Via: server204.web-hosting.com: authenticated_id: reduzakozmetics@enterprise1spl.com
X-Authenticated-Sender: server204.web-hosting.com: reduzakozmetics@enterprise1spl.com
X-Source:
X-Source-Args:
X-Source-Dir:
X-From-Rewrite: unmodified, already matched


Hello
how is your health ? hope you are doing well .we wish to know if you will still be interested to proceed with your order.


Regards,

Paris Akson.
"Look for the lies."
Being Blackmailed? Go here and do this first: https://blackmailscams.com/
The information you supply can help others from becoming Victims.
Image
User avatar
Big Al
"Little pee nut" admin.
 
Posts: 84975
Joined: Fri Apr 27, 2012 10:48 pm

Next

Return to Scammer 419 emails.

Who is online

Users browsing this forum: No registered users and 68 guests