Microsoft 365 Scam (818)-301-0825

[trashywuff]

It’s always fun when these appear in my inbox

Scam Number: (818)-(301)-0825
Scammer’s Website or Email:
Additional information about this scam:

Confirmed! Your PC Health Security PRO service through Microsoft 365 is live. USD 391.15 will be processed.

Urgent: Unauthorized? Call 1-(818)-(301)-0825.

Account Snapshot:
Subscription: #1082-210-4507
ID: 6907218ca
Service: PC Health Security PRO
Term: 4-Year
Active: Monday, June 30, 2025
Devices: 2
Payment: Auto-Debit
Amount: USD 391.15
Truly Yours,

Microsoft 365 Welcome Team
Eva Force
1-(818)-(301)-0825

Automated. ©2025

[Matherchod]

@trashywuff

(818)-(301)-0825

bg9help.top or Quick Assist

[FIREFIGHTER619]

8183010825

[trashywuff]

Another one

"Your Microsoft 365 membership is now active! We’ll charge USD 557.23 to your account within 12 hours.

If you didn’t make this purchase, please notify us immediately at 828 248 7825.

Account information:
Transaction id: ORD199774
Customer ID: 2d2a149910653a278e
Service: GuardDefend
Subscription: Four Year
Start Date: Wednesday, July 02, 2025
Device Limit: 2 PC
Payment: Auto-Debit
Amount: USD 557.23
Very Truly Yours,

Microsoft 365 Billing Team
Jon Smith Joyce
828 248 7825

System-generated message. Use provided contacts for support.
Microsoft 365 ©2025. All Rights Reserved"

[FIREFIGHTER619]

8282487825

[OfclyGoodenough]

These scammers were recently caught by our friend Nanobaiter attempting to steal $800,000 from a victim by impersonating Coinbase.

https://x.com/NanoBaiter/status/1940133227769004436

In this instance, the scammers

• generated a fake Coinbase login page, urging victims to call (844) 610-3372 (Digitorzo) by falsely claiming their “account access” has been “suspended” due to “unauthorized activity and identification failure.”
• • https://coinbase-signin.vercel.app/
    
    
• During the call, the scammers will take false American names and log details about their victims, including names, email addresses, Coinbase passwords and even SOCIAL SECURITY NUMBERS.
  
  
• The scammers will remotely connect to their victims’ computer through ConnectWise via bg9help.top, or in their words “connecting to the Coinbase Secure Server”

The scammers were found to be operating near the intersection of Bhim Gali and Bala Sahib Gurudwara Road in Delhi.