Face Mask Supply - facemasksupply.org

[firefly]

The fake website claims to sell "Coronavirus Safety Essentials":

From the fake website:

FaceMaskSupply is the original online personal protective equipment supplier and was the first of its kind. Owned and operated by sanitary experts, we pride ourselves on our product knowledge and quality customer service, so you can have safe and seamless online shopping experience.

We have come a long way since launching our website in 1996. We started off small and grew our range to cater for everybody’s health products needs. We now are serving online with our range of face masks, gloves, goggles, protective suits and thermometers.

Contact details:

Krumpeterweg 2624558 Henstedt-Ulzburg,Germany
+49 1521 2261956
surgicalfacemasksupply@gmail.com

+4915212261956
Number billable as mobile number
Country or destination Germany
Original network provider* Vodafone GmbH / MVNO Lycamobile Germany

The location is stolen from the German company Efomed-GmbH, having nothing to do with this fraud.

"since launching our website in 1996" is a blatant lie: the fake website on February 9. The fraudsters identity is hidden under the privacy protection given by the Registrar.

Entry in the aa419 Database of fraudulent websites: https://db.aa419.org/fakebanksview.php?key=142238

From the domain name registration:

Domain Name: FACEMASKSUPPLY.ORG
Updated Date: 2020-02-09
Creation Date: 2020-02-09
Registry Expiry Date: 2021-02-09
Registrar Registration Expiration Date:
Registrar: NameCheap, Inc.
Registry Registrant ID:
Registrant Name: WhoisGuard Protected
Registrant Organization: WhoisGuard, Inc.

This is what the fake website looks like:

More information is located here:
viewtopic.php?f=6&t=82276

[firefly]

The same "Coronavirus Safety Essentials" for sale, another fake website pretending to be Fake Mask Supply:

We have come a long way since launching our website in 1996.

We Ship From THE USA, EUROPE and ASIA.

There is no contact details on the fake website, no location, phone number or email address - the only option is to order their products on the fake website.

"since launching our website in 1996" is again a lie - the fake website was registered on January 27 by someone pretending to be in Shanghai, China.

Entry in the aa419 Database of fraudulent websites: https://db.aa419.org/fakebanksview.php?key=142242.

From the domain name registration:

Domain Name: facemasksupply.com
Updated Date: 2020-01-27
Creation Date: 2020-01-27
Registrar Registration Expiration Date: 2021-01-27
Registrar: GoDaddy.com, LLC

Registrant Organization:
Registrant State/Province: Shanghai
Registrant Country: CN

This is what the fake website looks like:

[firefly]

Again, the fraudsters stole the identity of a real company using the name Elite Export UK Limited since 2012, while offering for sale "Coronavirus Safety Essentials":

From the fake site:

Elite Export UK Limited is a leading online medical products supplier. We pride in having a wide selection of products, including a surgical face mask, surgical gown, gloves, safety essentials, and more.

Again, no contact details or location.

The UK in this case seems to be in India. The scammers operating this fake website originates from the Cameroon and are associated with other fake sites used in non-delivery scams.

Entry in the aa419 Database of fraudulent websites: https://db.aa419.org/fakebanksview.php?key=142243.

From the domain name registration:

Domain Name: ELITEEXPORTUKLTD.COM
Updated Date: 2019-10-05
Creation Date: 2019-08-05
Registrar Registration Expiration Date: 2020-08-05
Registrar: Hostinger, UAB

Registry Registrant ID: Not Available From Registry
Registrant Name: Farhan Alam
Registrant Organization: Farhan Alam
Registrant Street: St. Paul Street
Registrant City: Kolkata
Registrant State/Province: West Bengal
Registrant Postal Code: 700019
Registrant Country: IN
Registrant Phone: +91.6291288410
Registrant Email: bestlinksmanager@gmail.com

This is what the fake website looks like:

[firefly]

Same logo, same "Coronavirus Safety Essentials" for sale, another fake website: Mr Drug Store and also FaceMaskSupply:

From the fake website:

Products displayed are currently IN STOCK. Due to the Coronavirus outbreak and high demand, product availability is limited. Please allow 24-48 hours for shipping.

Since 1996, we supply corporate and individual clients, supporting world's most critical organizations directives at their most critical moments.

FaceMaskSupply is the original online personal protective equipment supplier and was the first of its kind.
At FaceMaskSupply we have a variety of payment options for ease of purchase including Visa and MasterCard. We offer fast shipping so you get what you want, when you need it, because your health is important to us. All orders will include free shipping.

Again, no location, no phone number, no email address.

From the domain name registration:

Domain Name: MRDRUGSTORES.COM
Updated Date: 2019-11-23
Creation Date: 2019-09-23
Registrar Registration Expiration Date: 2020-09-23
Registrar: Hostinger, UAB

Registry Registrant ID: Not Available From Registry
Registrant Name: Domain Admin
Registrant Organization: Privacy Protect, LLC (PrivacyProtect.org)

This is what the fake website looks like:

[firefly]

Another clone, another name: Medical Elixir Kft / Face Mask Supply:

Again, the name, the registration details and the location are stolen from a real pharmacy in Debrecen, Hungary, founded in 2003 and having nothing to do with the fraud.

The victims are targeted on Facebook:

Medical Elixir KFT
@medicaln95facemask
CONTACT INFO
Call +36 30 741 6746
info.medicalelixirkft@gmail.com
http: // medicalelixirkft.com
Page created - February 18, 2020

From the fake website:

A fight for Corona Virus. Face Masks N95, Surgical Fasks, Medical Fasks, 3M Masks. All stocks are available ready to be shipped.

MEDICAL ELIXIR KFT is the originalprotective equipment supplier and was first of its kind. and operated by sanitary , we pride ourselves on product knowledge and quality service, so you can safe and seamless online experience. We have come long way since launching website in 2004.

At MEDICAL ELIXIR KFT we have a of payment options for of purchase including Visa MasterCard. We offer fast so you get what want, when you need, because your health is to us. All orders include free shipping.

All payments for goods must be made via international wire transfer directly to one of our bank accounts which we have within the EU regions of Poland, Portugal,Belgium, Germany, Hungary , Turkey , Client's consignment are shipped after the payment confirmation in one of our bank accounts given in our signed Invoice, and kindly contact us through phone/email after you have make a payment for confirmation.
Our payment terms is strictly T/T payment.
Clients are expected to email us with the scan proof of the payment by your bank, so we can released your order immediately to shipped. Clients are responsible for all bank transfer fees. we do ship clients order once payment is received.
There will be no shipment booking confirmation for your order/consignment until agreed payment deposit are received in our account.

Contact details:

MEDICAL ELIXIR KFT
Address: Szigligeti utca 15. II. em. 4.Debrecen Hungary
Office Telephone Number: +36-205463647
Whatsapp: +36307416746
Email: info@medicalelixirkft.com
Email2: info.medicalelixirkft@gmail.com

+36205463647
Number billable as mobile number
Country or destination Hungary
Original network provider* Telenor Hungary Távközlési Kft.

+36307416746
Number billable as mobile number
Country or destination Hungary
Original network provider* T-Mobile Magyarország Távközlési Rt.

Entry in the aa419 Database of fraudulent websites: https://db.aa419.org/fakebanksview.php?key=142245.

From the domain name registration:

Domain Name: medicalelixirkft.com
Updated Date: 2020-02-11
Creation Date: 2020-02-11
Registrar Registration Expiration Date: 2021-02-11
Registrar: WEBCC

Domain Status: ok
Registry Registrant ID: Not Available From Registry
Registrant Name: Domain Admin
Registrant Organization: Whoisprotection.cc

This is what the fake website looks like:

[firefly]

Another clone, another company spoofed: 3M Istanbul / Face Mask Supply:

Again, the real 3M has nothing to do with this fraud.

From the fake website:

A fight for Corona Virus. Face Masks N95, Surgical Fasks, Medical Fasks, 3M Masks. All stocks are available ready to be shipped.

Since 1996, we supply corporate individual clients, supporting world's critical organizations directives at most critical moments.

3m Istanbul is the originalprotective equipment supplier and was first of its kind. and operated by sanitary , we pride ourselves on product knowledge and quality service, so you can safe and seamless online experience. We have come long way since launching website in 2004.

At 3m Istanbul we have a of payment options for of purchase including Visa MasterCard. We offer fast so you get what want, when you need, because your health is to us. All orders include free shipping.

All payments for goods must be made via international wire transfer directly to one of our bank accounts which we have within the EU regions of Poland, Portugal,Belgium, Germany, Hungary , Turkey , Client's consignment are shipped after the payment confirmation in one of our bank accounts given in our signed Invoice, and kindly contact us through phone/email after you have make a payment for confirmation.
Our payment terms is strictly T/T payment.
Clients are expected to email us with the scan proof of the payment by your bank, so we can released your order immediately to shipped. Clients are responsible for all bank transfer fees. we do ship clients order once payment is received.
There will be no shipment booking confirmation for your order/consignment until agreed payment deposit are received in our account.

Contact details:

3m Istanbul
Address: Levent, Büyükdere Cd. No:171, 34394 Beşiktaş/İstanbul.
Office Telephone Number: +9053 4356 5445
Email: info@3m-istanbul.com
Email2: m23419321@gmail.com

+905343565445
Number billable as mobile number
Country or destination Turkey
Original network provider* Turkcell Iletişim Hizmetleri AŞ

Entry in the aa419 Database of fraudulent websites: https://db.aa419.org/fakebanksview.php?key=142246.

From the fraudulent domain name registration:

Domain Name: 3m-istanbul.com
Updated Date: 2020-02-12
Creation Date: 2020-02-12
Registrar Registration Expiration Date: 2021-02-12
Registrar: WEBCC

Domain Status: ok
Registry Registrant ID: Not Available From Registry
Registrant Name: Domain Admin
Registrant Organization: Whoisprotection.cc

This is what the fake website looks like:

[firefly]

Same story, another name: FaceMask4U / Face & Skin Limted, this time pretending to be in the UK:

From the fake website:

Face & Skin Limted is the original online personal protective equipment supplier and was the first of its kind. Owned and operated by sanitary experts, we pride ourselves on our product knowledge and quality customer service, so you can have safe and seamless online shopping experience. We have come a long way since launching our website in 1996.

At Face & Skin Limted we have a variety of payment options for ease of purchase including Visa and MasterCard. We offer fast shipping so you get what you want, when you need it, because your health is important to us. All orders will include free shipping.

Contact details:

Address: Bracey’s Accountants (Medical) L 18-20 High Street
Stevenage Hertfordshire SG1 3EJ
Tel: +447418322680
Email: sales@facemask4u.com

+447418322680
Number billable as mobile number
Country or destination United Kingdom
Original network provider* Tismi BV

Bracey’s Accountants (Medical) is real and can be found at that location... but they have no connection with the fraudsters pretending to be located in the same place.

Entry in the aa419 Database of fraudulent websites: https://db.aa419.org/fakebanksview.php?key=142248.

From the domain name registration:

Domain Name: FACEMASK4U.COM
Updated Date: 2020-02-19
Creation Date: 2020-02-19
Registry Expiry Date: 2021-02-19
Registrar: NameCheap, Inc.
Reseller: NAMECHEAP INC

Registry Registrant ID:
Registrant Name: WhoisGuard Protected
Registrant Organization: WhoisGuard, Inc.

This is what the fake website looks like:

[firefly]

Same scam, this time supposedly in Lithuania and Poland: DEAS s.r.l. / True Life Medicare:

Deas is a real company in Italy. Medicare is the public and state health insurance within the United States health care system for the elderly or disabled. None of them have anything to do with the fraudsters abusing their identity.

Again, 3m Istanbul is the alleged producer of the special masks claimed to protect from Corona virus.

From the fake website:

DEAS SRL is the originalprotective equipment supplier and was first of its kind. and operated by sanitary , we pride ourselves on product knowledge and quality service, so you can safe and seamless online experience. We have come long way since launching website in 2010.

As a leader in the industry, with over 12 years of surgical glove experience, True Life Medicarecontinually enhances our surgical glove portfolio to provide protection, performance and a broad range of styles tailored to your unique needs.
DEAS SRL also has a very good cooperation with many famous factories in Malaysia, Indonesia & Vietnam, Poland and Lithuania which makes us easy to source some special rubber products that we don’t have for our customers with best quality & competitive price to meet their requirements.

All payments for goods must be made via international wire transfer directly to one of our bank accounts which we have within the EU regions of Poland, Portugal,Belgium, Germany, Hungary , Turkey , Client’s consignment are shipped after the payment confirmation in one of our bank accounts given in our signed Invoice, and kindly contact us through phone/email after you have make a payment for confirmation.
Our payment terms is strictly T/T payment.
Clients are expected to email us with the scan proof of the payment by your bank, so we can released your order immediately to shipped. Clients are responsible for all bank transfer fees. we do ship clients order once payment is received.
There will be no shipment booking confirmation for your order/consignment until agreed payment deposit are received in our account.

Contact details:

Location1 : Ul. Kościuszki 31 Poznań 61-890, Poland.
Location2 : M. K. Čiurlionio g. 82-50, LT-03100, Vilnius, Lithuania
Tel: 0037062162514
Mail: sales@truelifemedicare.com

+37062162514
Number billable as mobile number
Country or destination Lithuania
Original network provider* UAB Omnitel

Entry in the aa419 Database of fraudulent websites: https://db.aa419.org/fakebanksview.php?key=142249.

From the domain name registration:

Domain Name: TRUELIFEMEDICARE.COM
Updated Date: 2020-02-18
Creation Date: 2020-02-16
Registry Expiry Date: 2021-02-16
Registrar: NameCheap, Inc.
Reseller: NAMECHEAP INC

Registry Registrant ID:
Registrant Name: WhoisGuard Protected
Registrant Organization: WhoisGuard, Inc.

This is what the fake website looks like:

[firefly]

Again, abusing the stolen name of a company legally registered in the UK since 2016.

Same text and conditions again with the only difference the a stolen name is replaced with another stolen name, and the location is again stolen from someone else having not connection with the fraud.

Contact details:

ADDRESS : Argo House Kilburn Park Road London NW6 0LF
EMAIL: info@maskenterpriseltd.com

On their products list:

Entry in the aa419 Database of fraudulent websites: https://db.aa419.org/fakebanksview.php?key=142250.

From the domain name registration:

Domain Name: maskenterpriseltd.com
Updated Date: 2020-02-20
Creation Date: 2020-02-20
Registrar Registration Expiration Date: 2021-02-20
Registrar: GoDaddy.com, LLC

Registry Registrant ID: Not Available From Registry
Registrant Name: Registration Private
Registrant Organization: Domains By Proxy, LLC

This is what the fake website looks like:

[firefly]

Companies names already reported here - new domain name, same offer:

From the fake website:

Products displayed are currently IN STOCK. Due to the Coronavirus outbreak and high demand, product availability is limited. Please allow 24-48 hours for shipping.

Since 1996, we supply corporate and individual clients, supporting world's most critical organizations directives at their most critical moments.

FaceMaskSupply is the original online personal protective equipment supplier and was the first of its kind. Owned and operated by sanitary experts, we pride ourselves on our product knowledge and quality customer service, so you can have safe and seamless online shopping experience. We have come a long way since launching our website in 1996.

At FaceMaskSupply we have a variety of payment options for ease of purchase including Visa and MasterCard. We offer fast shipping so you get what you want, when you need it, because your health is important to us. All orders will include free shipping.

Again, no location, no phone number, no email address.

Entry in the aa419 Database of fraudulent websites: https://db.aa419.org/fakebanksview.php?key=142251.

From the domain name registration:

Domain Name: HARTMANBV.NET
Updated Date: 2020-02-11
Creation Date: 2020-02-11
Registrar Registration Expiration Date: 2021-02-11
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com

Registrant Name: laun john
Registrant Organization: pharma
Registrant Street: 973 Bruce Avenue
Registrant City: Clearwater
Registrant State/Province: FL
Registrant Postal Code: 33767
Registrant Country: US
Registrant Phone: +1.9494241538
Registrant Email: mrdrugstores@gmail.com

This is what the fake website looks like: