Fake HP printer setup https://printer123comsetup.live/

Scams Tech Support Scam
, , ,
1

Scam Number: To be determined
Scammer’s Website or Email: Error

Google Sites feeder page at 123.hp.com/setup - Easy Setup & Install HP Printers

Additional information about this scam: The usual fake driver-installation charade ends in the fake error page linked above, with a JivoChat widget. The scammers are active in the chat but I haven’t gotten a call-back yet.

On the same IP address as printer123comsetup.live, there is a bunch of suspicious domain names:

2

is now active at Error, and

active at Error

and being advertised on Google search by “Techworld Services/POS RETAIL BILLING SOLUTIONS/Paras Goyal” of India: https://adstransparency.google.com/advertiser/AR10346235625157427201?origin=ata&region=US , https://adstransparency.google.com/advertiser/AR14057996802456551425?origin=ata&region=US

3

Still active

4

Error message part of site already pulled

5

https://printerdiy.website:2083/ - Their cPanel login page.
https://webmail.printerpilots.com/ - webmail link

Private Archive Error - Page is vuln to IDOR checked 1-1000 to pull any private messages. no luck.

Possibly CVEs, https://www.cvedetails.com/vulnerability-list/vendor_id-72/product_id-913/GNU-Mailman.html, according to printerdiy.website mailing lists - Admin Links, they are running Mailman 2.1.39.

Ill mess around with it some more tomorrow.

6

Another Techworld Services fake HP site and number:

https://pcprinterhost.live/setup/error.php

Ben from HP Printer Support can be reached at 469-718-2709. His favorite color is black. He says that he cannot sing the HP Printer Song, and that there is no such Song.

7

The site is down now.

8

Still semi-active at Error , Google pages feeder site at 123.hp.com setup - HP Printer Setup & Install Drivers .