info@woodexmedical.com

[Big Al]

Sorry for late reply. DO you still need the product?

Header:

Delivered-To:
Received: by 2002:a54:2ccd:0:0:0:0:0 with SMTP id z13csp2509345ecr;
Fri, 22 May 2020 09:31:09 -0700 (PDT)
X-Google-Smtp-Source: ABdhPJwUV0f4lNndeBOLYYGQLyiMXtV4HX49+vnwBFbOdQ5SoaZvWVLtXs1D2T4KeNll1i2liq7r
X-Received: by 2002:a17:90a:21cf:: with SMTP id q73mr5463340pjc.230.1590165069016;
Fri, 22 May 2020 09:31:09 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1590165069; cv=none;
d=google.com; s=arc-20160816;
b=HHCaQ4kxVgOwAi8yKEuLhz5OHcbxu8Xiko+chYRaateMBdfLk5xpj/l9iTBU8hkeLg
S4PubrPGyNw2mQUOj2z6+tdyFWTkOkwayiwSVFlBnoMy14MXYOw7Ou8jzTVJXalficnd
q27LpHL7sbml4x2YgbIRqEm/5KeD2L1rXPmRE14dXh40pUs93P0OS3qF9WjM4TYT39p0
e5McMpgZibKPGmj+e/fUKjDu4WpA8xsZCoaxADDKiQH5xMMSYVdpIMRhOWgu/g6uf8qA
7osdNKBirhC7lfA5VAsphc/nc1/sWlO0Eh5fwE5gp4yA7y2AcA67LiogAIyej+szmmLz
sLmA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=user-agent:message-id:references:in-reply-to:subject:to:from:date
:content-transfer-encoding:mime-version:dkim-signature;
bh=5IBsfV57iHr/B4BpV+zc8GyCMf/jjJ/WM5iQbAwh6c0=;
b=OWkLWSmFuvaWiDXFp0KtfQEt4IHnnJ7ffDF37wGh772h0CEc7kIUp3zPO0IyVgaf5s
46Htmb0vs+WOJPT4hI4GIhCs6M7Q0Oz8lhdmrdgYnPZbmwXs7y782kx91m4rs9LuBMlq
0+S4f+O8cqQbOZNOFtEYhBLXvK/ZbvhVBDzkTzMsj88tnoErxKn7osi8J130RPbpJgd5
Nmh/LJ2ymoWTjdbSpWSbk9i8Lj+F/ALWTkSDbNZ+QAl1DEVJBUxt30U+Zhrien3p8gOJ
ZepzeB4g31pnm9EIqL3pE8cTFd2PurIvd0zeZ9dnaD+6FvoIQU8HBYYeXZ+f4kUxqMBj
lkjw==
ARC-Authentication-Results: i=1; mx.google.com;
dkim=temperror (no key for signature) header.i=@woodexmedical.com header.s=default header.b=xL6ndexo;
spf=neutral (google.com: 74.220.205.151 is neither permitted nor denied by best guess record for domain of info@woodexmedical.com) smtp.mailfrom=info@woodexmedical.com
Return-Path: <info@woodexmedical.com>
Received: from outbound-ss-1150.hostmonster.com (outbound-ss-1150.hostmonster.com. [74.220.205.151])
by mx.google.com with ESMTPS id l5si7473825pld.270.2020.05.22.09.31.08
for < >
(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);
Fri, 22 May 2020 09:31:08 -0700 (PDT)
Received-SPF: neutral (google.com: 74.220.205.151 is neither permitted nor denied by best guess record for domain of info@woodexmedical.com) client-ip=74.220.205.151;
Authentication-Results: mx.google.com;
dkim=temperror (no key for signature) header.i=@woodexmedical.com header.s=default header.b=xL6ndexo;
spf=neutral (google.com: 74.220.205.151 is neither permitted nor denied by best guess record for domain of info@woodexmedical.com) smtp.mailfrom=info@woodexmedical.com
Received: from cmgw14.unifiedlayer.com (unknown [66.147.244.17]) by soproxy7.mail.unifiedlayer.com (Postfix) with ESMTP id C1D8A215C5D for < >; Fri, 22 May 2020 10:31:02 -0600 (MDT)
Received: from bh-29.webhostbox.net ([204.11.58.156]) by cmsmtp with ESMTP id cAZaj1kbQKxvrcAZaj0ezq; Fri, 22 May 2020 10:31:02 -0600
X-Authority-Reason: ss=1
X-Authority-Analysis: v=2.3 cv=VrYN/d+n c=1 sm=1 tr=0 a=emmHvlfGVCXMXVqpPQw2SQ==:117 a=emmHvlfGVCXMXVqpPQw2SQ==:17 a=dLZJa+xiwSxG16/P+YVxDGlgEgI=:19 a=kj9zAlcOel0A:10:nop_charset_1 a=sTwFKg_x9MkA:10:nop_rcvd_month_year a=XG_hKEBX1L0A:10:endurance_base64_authed_username_1 a=PvNYecq4U2jnVF7vfpAA:9 a=CjuIK1q_8ugA:10:nop_charset_2
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=woodexmedical.com; s=default; h=Message-ID:References:In-Reply-To:Subject: To:From:Date:Content-Transfer-Encoding:Content-Type:MIME-Version:Sender: Reply-To:Cc:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Id:List-Help: List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=5IBsfV57iHr/B4BpV+zc8GyCMf/jjJ/WM5iQbAwh6c0=; b=xL6ndexosQ7FdTBa4lH0XcZpH+ D/PyT/+7noiEJoomKmh+xtqOHAFjQqDUGMx93ETGjshxIgEvCqil+B37aCVV9Xf+Tb4GHHNXB/Lzc a38Jxz3XeiRJo1gw5zs7jpujrN3iariciX1xCp3KQp9PXwrAInaMfNKrJAzt64wPDLMKASa0o/yT2 gqJmT7Q2rzt+EWFbYTIWkCa9Z0r5Tnjvz3quDa2jt6bi7wb0YKGNW7KBtIM6K93pO45fBn2/2bdC2 RYG6vaYzBUCqdA7R2nxm0iuHXZCfDqNFTubyrVQ6ZqvBpnaXKjLIx2u6W0y9ptiUC3VbcLh5/dsFK 6r8UG6Tw==;
Received: from [127.0.0.1] (port=38632 helo=bh-29.webhostbox.net) by bh-29.webhostbox.net with esmtpa (Exim 4.92) (envelope-from <info@woodexmedical.com>) id 1jcAZZ-000Bqp-UF for ; Fri, 22 May 2020
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII; format=flowed
Content-Transfer-Encoding: 7bit
Date: Fri, 22 May 2020
From: info@woodexmedical.com
To:
Subject: Re: KN-95 Respirators
In-Reply-To: <CAMW9G=3be+UnYzKsr4qbW8N2OU=viGDXGWsNAJ1EOYVi-oAsnQ@mail.gmail.com>
References: <CAMW9G=3be+UnYzKsr4qbW8N2OU=viGDXGWsNAJ1EOYVi-oAsnQ@mail.gmail.com>
Message-ID: <b2e9e313ef65550ea4b7299db02a7c34@woodexmedical.com>
X-Sender: info@woodexmedical.com
User-Agent: Roundcube Webmail/1.3.7
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - bh-29.webhostbox.net
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - woodexmedical.com
X-BWhitelist: no
X-Source-IP: 127.0.0.1
X-Source-L: Yes
X-Exim-ID: 1jcAZZ-000Bqp-UF
X-Source:
X-Source-Args:
X-Source-Dir:
X-Source-Sender: (bh-29.webhostbox.net) [127.0.0.1]:38632
X-Source-Auth: info@woodexmedical.com
X-Email-Count: 1
X-Source-Cap: d29vZGV4bWVkaWNhbDthbGxwdWczOTtiaC0yOS53ZWJob3N0Ym94Lm5ldA==
X-Local-Domain: yes

Orig IP: 204.11.58.156 | Orig ISP: Public-domain-registry | City: n/a | Country: United States

Yes, we can provide you with that quantity.
Attached to this mail is our price list. check and revert back to us
with an official PO.
thanks

Phone From the Document:
+66610593150
Number billable as mobile number
Country or destination Thailand
City or exchange location
Original network provider* Advanced Info Service Public Company Ltd (AIS)

[Big Al]

Hello
We received your inquiry and order of pcs of 8210.
looking at your order quantity the price is 1.25USD/pc.
pcs = USD CIF.
PAYMENT TERM:
50%TT AGAINST PROFORMATION INVOICE = USD
50%TT AGAINST SHIPPING AND DOCUMENTS. = USD

IF YOU ARE OK, PLEASE SEND US BILLING DETAILS AND SHIPPING DETAILS.
OUR INVOICE IS 48 HOURS ACTIVE.
FOR EASY COMMUNICATION YOU CAN CALL US ON WHATSAPP +66610593150.
THANKS.

[Big Al]

please send us a copy of the swift when you do the payment. Thanks

Bank account from the fake invoice:
Bank Name: Bank of Ayudhya
Account Name: W. C. L.
Account Number: 105-1-98XXXX
Swift Code: AYUDTHBK
Bank Address: 1222 Rama III Road, Bang Phongphang, Yan Nawa, Bangkok 10120 Thailand

[firefly]

The fake supplier used in fraud claims to be Woodex Company Limited and uses a fraudulent website active from the domain name woodexmedical.com.

From the fake website:

Woodex Company Limited was founded in 2004 to distribute disposable products to local hospitals and healthcare centers. Woodex Company Limited. has been committed to manufacture and distribute high quality single use disposable healthcare products mainly made from the fascinating nonwovens technologies.
With manufacturing and supply based in The Thailand, and certified to ISO 9001:2008, we are well located to supply our Respiratory and Personal Protective Equipment Products and services throughout Europe.

Contact details:

Address 237/2 Song Na Road, Mueang District, Kalasin 46000
info@woodexmedical.com
WhatsApp : +66 610 5931 50

+66610593150 - the same phone nubmer was previously reported on our forum in viewtopic.php?f=6&t=83247&start=10, while being used by another fake supplier pretending to sell face masks, ubonwanto.com.

Entry in the aa419 Database of fraudulent websites: https://db.aa419.org/fakebanksview.php?key=143771.

From the domain name registration:

Domain Name: woodexmedical.com
Updated Date: 2020-04-23
Creation Date: 2020-04-23
Registrar Registration Expiration Date: 2021-04-23
Registrar: GoDaddy.com, LLC

Registry Registrant ID: Not Available From Registry
Registrant Name: Sabyasachi Baral
Registrant Organization: Domains Meena
Registrant Street: BBSR
Registrant Street: Nayapalli
Registrant City: Bhubaneswar
Registrant State/Province: Orissa
Registrant Postal Code: 751012
Registrant Country: IN
Registrant Phone: +91.9439212890
Registrant Email: sabyasachi.baral89@gmail.com

This is what the fake website looks like:

[Big Al]

Ok. Please do send us a copy of the swift so that we can start
processing your order.
Thanks.

[Big Al]

Dear
We received your message on the invoice. We don't know why the
transaction failed.
But this is an Updated invoice with a change of account as you
requested.

Bank account from the fake invoice:
Bank Name: CIMB Thai Bank Public Company Limited
Account Name: W. C. L
Account Number: 70-1118XXXX
Swift Code: UBOBTHBK
Bank Address: 71/6 Klang Mueang Road, Tambon Nai Mueang, Amphoe Mueang, Khon Kaen 4000, Thailand

[Big Al]

Please we discovered communication with you is very difficult. Kindly
add us on whatsapp with this number or call us directly for any
assistance with the transactions. Whatsapp: +66610593150
Mr. Akarachai
Woodex Company Limited.

[Big Al]

Thats understood. I dont know if you made the payment already. Please
send us the swift. Your good is ready for shipping but we haven"t
received any kind of confirmation of payment.

Your stock is available for shipping. I will ask the warehouse manager
to prepare a small video of your stock and i will send to you later in
the day.
Please let us know if you are still interested or we should cancel the
order.
Thanks

[Big Al]

Please can you kindly send us the swift for record. Without a copy of
the swift the bank can't grand us access to the funds.
Kindly send us a copy of the swift.
We will be waiting for the swift to proceed.
Thanks

Hello SIr,
Please kindly send us the swift for record and for us to start preparing
the goods for shipping and documentation. Please we are waiting on you.
Thanks.

[Big Al]

Hello
Attached here is your stock. Please if you are not interested any more
kindly inform us. The are many buyers waiting. Ones we issue our invoice
we have to work on reserving the goods. that we have done for the pass
three days now.
Please if you have made the payment kindly send us the swift as our
financial department verified with the bank and the bank didn't receive
any more from America.
Please let us know when you do the payment as we are waiting now only on
you.
Thanks