Email Norton scam

Scams
,
1

Email sender: Travis Yerushalmi’s LLC
[email protected]
Email title: INV-005784544 for $329.99
from Travis Yerushalmi’s LLC

Body:

Norton

Helpline number

+1 (845) 952-6718 (toll free)

Hello,

You successfully purchased our Antivirus Services Nort-One 360 package. It may take two to twelve hours for this transaction to show up on your account statement.

Invoice 005784544 for the amount of $329.99 is now available.

You have $329.99 outstanding to be paid by 27/11/2024.

Feel free to contact us +1 (845) 952-6718 if you have any questions.

Regards,

2

8459526718 Danny Wednesday 11-27-24 11:16AM EST

3

Kolkata chodes of course:)
IP Details,

"ip": "49.37.38.87",
    "security": {
        "vpn": false,
        "proxy": false,
        "tor": false,
        "relay": false
    },
    "location": {
        "city": "Kolkata",
        "region": "West Bengal",
        "country": "India",
        "continent": "Asia",
        "region_code": "WB",
        "country_code": "IN",
        "continent_code": "AS",
        "latitude": "22.5180",
        "longitude": "88.3832",
        "time_zone": "Asia/Kolkata",
        "locale_code": "en",
        "metro_code": "",
        "is_in_european_union": false
    },
    "network": {
        "network": "49.32.0.0/13",
        "autonomous_system_number": "AS55836",
        "autonomous_system_organization": "Reliance Jio Infocomm Limited"
4

I kept them busy for an hour (they had a hard time bypassing my script to blocking CW: they disabled Windows defender, changed chrome security settings, switched to firefox and downloaded it several times… those blokes are in love with CW).

They noticed my fake DSJAS (still haven’t managed to get the SSL certificate going so I heard “site is not secure” in the back. Need to work on that again).
Call-back number 5702619944 (not confirmed if spoofed I got tired of talking to them)

Reported their google forms (from tiny.cc/formn) and https://cmcare.help/ (it was already in our list)

lazy blokes don’t even care about typos anymore

image
image1135×689 60.7 KB

5

Scammer James Martin from Kolkata