247techies. The "free checkup" scam

Scams
1

Hello there again users of scammer.info

8-Ball here again.

I called 247techies to claim the free diagnosis but they ask me to pay and they wanted to make me pay for no reason just for a free diagnosis which wasn’t free. They told me they wanted me to sign up with my credit card so that they could “verify my identity and block other users from abusing the free diagnosis” and they told me that I would automatically register as a paid customer. I told them I wanted the free diagnosis, they didn’t want it. So I seriously don’t know but I suggest that we expose them and we shut them down immediately. They have 2 branches however they all share the site 247techies.com

Their other site is UK based
247techies.co.uk

I strongly suggest that you all stay by me and help me STFU them. Theese people mustn't exist in the web.
They don't want to help and if they connect with you, as users showed, they give fake diagnosis.
We must stop them!!!!

At this part I request all your help and effort to shut them down!

2

These scammers have their corporate setup spreadout. Sri Lanjka, Indai, Hog Kong and USA>

The main thief behind this scam is a person with Sri Lankan name: Dilendra Wimalasekere

Domain Name: 247TECHIES.COM

Registrar URL: http://www.godaddy.com

Update Date: 2012-07-14T10:36:55Z

Creation Date: 2009-04-20T11:33:49Z

Registrar Abuse Contact Email: [email protected]

Registrar Abuse Contact Phone: +1.4806242505

Registrant Name: Dilendra Wimalasekere

Registrant Organization: 247 Techies LLC

Registrant Street: 6955 N

Registrant Street: Durango Drive

Registrant City: Las Vegas

Registrant State/Province: Nevada

Registrant Postal Code: 89149

Registrant Country: US 104.25.150.23, 104.25.151.23

Registrant Phone: +1.7024728676

Registrant Fax: +94.112564278

Registrant Email: [email protected]

3

@drwat#96470 jeez. You found their registrant email. I found one of their other companies!

please also check on http://www.eurekahelpdesk.lk/contact-us.php and lemme know!

4

@8-Ball#96473 Great find.

eurekahelpdesk.lk 203.115.18.43

5

lel. They have the same agents

https://247t.net

https://support.eurekahelpdesk.lk/

6

@drwat can you help me find other mutual websites to theese so I can trace the guys?


7

@8-Ball#96476

eurekahelpdesk.lk

History of changes:

2019-04-17 insert phone 076 1762 777

2018-02-27 delete phone 011 7878 100

2018-02-27 insert phone 072 2291 401

247techies.com
3960 Howard Hughes Parkway, Suite 500, Las Vegas, NV 89169 USA

History of changes:
2019-05-19 delete phone 1-888-299-2024
2019-05-19 insert phone 1-888-299-8807
2019-04-16 delete phone 1-888-296-5819
2019-04-16 insert phone 1-888-299-2024
2018-02-02 delete vp V. Dinesh
2018-02-02 insert managingdirector V. Dinesh
2018-02-02 update person_description V. Dinesh => V. Dinesh
2018-02-02 update person_title V. Dinesh: Vice President
2016-10-30 delete phone 1-888-321-7228
2016-09-04 delete person Paige Smith
2016-09-04 delete phone 1-855-283-5551
2016-09-04 delete source_ip 202.21.32.247
2016-09-04 insert source_ip 104.25.150.23
2016-09-04 insert source_ip 104.25.151.23

8

Thx so much drwat

9

Heres info I found:

247 Techies LLC

Addresses:
-3960 Howard Hughes Parkway,Suite 500,Las Vegas, NV 89169, USA
-6955 N Durango Drive, Las Vegas, NV 89149, USA
-321 Galle Road, Colombo Sri Lanka
-9 Brunel Mews, London, W10 4AQ.

Tech Support:
1-888-299-8807
1800-223-611
0-800-410-1205

Business:
1-702-472-8676
+44-786-674-2416

855-283-5552
247techiessmb.com

855-283-5551
247techiesca.com

888-299-9203
247techies.com

0-800-820-2247
247techies.co.uk

1800-600-357
247techiesau.com

https://www.linkedin.com/company/247-techies
Dilendra Wimalasekere -Founder
Saman Jayawardena -Director Finance & Operations
Kasun Rajapaksha -Senior Web Developer
Minhaj Jamaldeen -Team Lead/Service Desk
Mafaz Mohideen -Senior Technical Consultant

Previous Scammer.info reference:
http://scammer.info/d/16008-24-7-techies/7
http://scammer.info/d/9159-24-7-techies/3

Other numbers used:
+94 11 256 4277
reapdigital.com
321 Galle Road, Colombo 3, Sri Lanka

https://support.247techies.com
https://support.eurekahelpdesk.lk

076 1762 777
011 7878 100
eurekahelpdesk.lk
321 Galle Road, Colombo, Sri Lanka

866-681-2962
888-713-1392
https://www.consumeraffairs.com/tech-support-services/24-7-techies.html
https://www.bbb.org/us/tx/dallas/profile/information-technology-services/technical-247-help-0875-91015713
technical247help.com (shutdown)

877-447-7857 (popup)
877-406-6450 Ext 5025 (callback)
888-713-1392 (called from)
http://scammer.info/d/17751-microsoft-warning-alert-877-447-7857

AlphaTech365
alphatech365.com (blank page)
877-406-6450 Ext. 5074
http://scammer.info/d/17577-my-first-number-d/5
https://800notes.com/Phone.aspx/1-877-406-6450
http://scammer.info/d/18037-tech-support-scam/9

888-319-2856
https://www.bbb.org/us/ny/new-york/profile/information-technology-services/365-tech-care-0121-179116

833-313-5841
365techcare.com (blank page)
https://webcache.googleusercontent.com/search?q=cache:xirnEwQ5uCQJ:https://365techcare.com/email-support.php

10

Here’s a dumb thing not to do: I went to the site and clicked on one of their names without looking in the bottom left to where the address goes to and it started downloading something that Mcafee deemed safe but I deleted it and exited the page quickly. It had a “B” logo on the download. Anyone know what that was that was downloading?

11

365tech care answered and hung up. Just sondering which number is active

12

@oadamninic#96494 Its a Remote Access Client app by BeyondTrust Remote Support (formerly Bomgar) . The software allows them to custom ID each computer they connect to.

Some of the options available to them:

[quote]

[b]Note:[/b][u] You can enable multiple login types so that if one authentication fails or the User/Customer cancels the process, the next configured login method is invoked (SAML, then external authentication server, then LDAP, then Windows, then Internal). Not all of these options will necessarily appear in your system if they have not been configured.[/u]

[b]Configure general login options:[/b]
(Desktop Client only) Display last logged-in User on Login page: Check this box to allow the User ID field on the CSM Login page to display the last User to log in.
[b]Note:[/b][u] If enabled, the password will be stored in an encrypted format in the registry on the User’s computer, which might be considered a security risk.[/u]

(Desktop Client only) Allow Users to have system remember last password (auto-login): Check this box to display the "Automatically login without asking" check box on a User's Login window. Each User can then choose whether to type a login/password each time or automatically login.
[b]Note:[/b][u] If enabled, the password will be stored in an encrypted format in the registry on the User’s computer, which might be considered a security risk.[/u]

Validate Windows/LDAP credentials on server:
If this is not checked, Windows Credentials are validated on the client, which is not as secure unless you have full control of your network. If checked, the system will not be able to automatically log in the User/Customer without asking (that is, the person will have to type their credentials) but it is much more secure. For this feature to work, the server must have access to the Windows Domain or LDAP server.
[b]Note:[/b][u] It is recommended that you configure your server to use encrypted communication before enabling this feature so that credentials are not passed to the server in a potentially sniffable format.[/u]

Allow logging of authentication code (for troubleshooting): Check this box to enable logging of authentication calls in order to troubleshoot configuration (ex: when configuring LDAP setup). Then, enable authentication logging in the clients (Desktop Client and/or Portal/Browser Clients).

[/quote]
13

Again I find another post without any evidence of a scam being conducted.

Their MS partner logo is real:

Find the right app | Microsoft AppSource

The server their site is on does connect out to some oddball stuff.
https://www.virustotal.com/gui/ip-address/104.24.100.214/relations

There is some rather scummy websites on the server:
DO NOT VISIT: awwporn.com

The server their site is on appears to have a history of one or more actors dropping adware on people.

14

So they are resellers of Microsoft products, that doesn’t mean they aren’t capable of scamming people.

[b]Microsoft Solutions Provider[/b]

[quote]

The Microsoft Cloud Solution Provider Program (CSP) enables partners to directly manage their entire Microsoft cloud customer lifecycle. Partners in this program utilize dedicated in-product tools to directly provision, manage, and support their customer subscriptions. Partners can easily package their own tools, products and services, and combine them into one monthly or annual customer bill.

This program helps Microsoft partners become their customers’ trusted advisors. Because by using CSP, partners are able to own and manage the end-to-end relationship with their customers.

[/quote]

https://www.qbsgroup.com/news/what-is-the-microsoft-cloud-solution-provider-program/

While the host server (CYBERCON, INC.) might have other questionable websites, they are not the topic here.
https://www.virustotal.com/gui/domain/247techies.com/relations

Take a look at the Node list of downloads over the years and see the one called "Web_Browser_Password_Viewer.zip", then tell me they aren't scammers.
https://www.virustotal.com/graph//drawer/node-list/nodes/nscd2e0232-1204-a748-a345-eee3705230cb

They used that one customer PCs and just because they try to appear as legitimate as they can, doesn't mean they are!

15

Do we have proof for popup scam / scam in general?

16

@MKHNT#96671 no they connected to my computer to diangoes it

17

@NeeP#96675 I found this thread with someone who called their 888-296-5819 number several years ago and made a video.

http://scammer.info/d/3831-refunded-20-000-back-to-vics-from-tech-scammers

18

This is one of those companies that have been established many years ago and will do all they can to appear legitimate. Here are some complaints and fake reviews:

https://www.youtube.com/watch?v=J9vFWi9wEf0

https://www.bbb.org/us/nv/las-vegas/profile/computer-repair/247-techies-1086-90019967/complaints
https://www.yelp.com/biz/247-techies-las-vegas (scroll down to complaints)
https://www.makeuseof.com/answers/247-techies-legitimate-company/

False Reviews :
https://www.trustpilot.com/review/www.247techies.com (take note of how many posted on Jun 11)
https://www.reviews.io/company-reviews/store/24-7-techies

19

There are several YT videos where they use tree dir/s command to mislead.

Their operations are spread in Sri Lanka, Hong Kong, India and USA (to escape from the law)

The main scammer is: Dilendra Wimalasekere
They constantly change their web server as they get suspended:
2019-05-19 delete phone 1-888-299-2024
2019-05-19 insert phone 1-888-299-8807
2019-04-16 delete phone 1-888-296-5819
2019-04-16 insert phone 1-888-299-2024
2018-02-02 delete vp V. Dinesh
2018-02-02 insert managingdirector V. Dinesh
2018-02-02 update person_description V. Dinesh => V. Dinesh
2018-02-02 update person_title V. Dinesh: Vice President; Member of the Leadership Team => Member of the Leadership Team; Managing Director
2017-12-24 delete email [email protected]
2017-02-06 insert email [email protected]
2016-10-30 delete phone 1-888-321-7228
2016-10-30 insert index_pages_linkeddomain facebook.com
2016-09-04 delete person Paige Smith
2016-09-04 delete phone 1-855-283-5551
2016-09-04 delete source_ip 202.21.32.247
2016-09-04 insert source_ip 104.25.150.23
2016-09-04 insert source_ip 104.25.151.23
2016-08-07 delete source_ip 216.198.246.212
2016-08-07 insert person Paige Smith
2016-08-07 insert phone 1-855-283-5551
2016-08-07 insert source_ip 202.21.32.247
2016-02-01 delete source_ip 216.198.246.222
2016-02-01 insert source_ip 216.198.246.212
2015-04-02 insert email [email protected]
2015-04-02 insert phone 1-888-321-7228
2014-12-01 delete address 6955 N Durango Drive, Las Vegas, NV 89149 USA
2014-12-01 insert address 3960 Howard Hughes

...... and more....

20

@drwat#97987 https://www.linkedin.com/in/dilendra-wimalasekere-8a218/

https://www.crunchbase.com/person/dilendra-wimalasekere#section-overview

and
https://www.huffpost.com/entry/by-taking-the-agony-out-of-tech-support-he-built-a_b_592c7ee4e4b08861ed0ccb5c
wtf????