Microsoft Office Phishing site with numbers

https://office-com-setup.tk/setup/

United Kingdom +44 800 404 9449
USA/CA +1-800-833-7863
AUS +61 1800-531-339

I have reported the site, but the numbers might remain active.

They edited the site and removed the numbers. They placed an actual live.login to the real Microsoft, but its scripted to capture what you logged in

</s>onclick="capturePageAction(this)<e>

Forgot to capture it, but I didn't forget on the following:

1 844 486 0666
http://officecom.website
https://web.archive.org/web/20190704163923/http://officecom.website/

USA/CA 1833-674-0234
AUS 1300-36-1469
http://office.key-redeem.services
https://web.archive.org/web/20190704164702/http://office.key-redeem.services/

USA/CANADA +1-800-683-5717
United Kingdom 0-808-189-1033
Australia +61-1800-764-861
https://wwwofficesetup.com
https://web.archive.org/web/20190704165514/https://wwwofficesetup.com/

https://startsetups.com/id1/
https://cardsredeem.com/id1/?
https://web.archive.org/web/20190704170738/https://cardsredeem.com/id1/?

UK: +44 020 8004 5401 ,
USA/CANADA: 1-315-633-4470
microsoft-office-setup-online.com
https://web.archive.org/web/20190704172736/https://www.microsoft-office-setup-online.com/index.php/contact/

Its back, then while viewing, it changed again.

Seems they turn https://office-com-setup.tk/setup/ on/ off randomly to avoid detection, but I captured both this time!

https://web.archive.org/web/20190705002717/https://office-com-setup.tk/setup/ (Phishing form)
https://web.archive.org/web/20190705005758/https://office-com-setup.tk/setup/ (Links to real MS Office -numbers removed)

[[3,41],[3,4,15,37,41]]

More websites/numbers:

USA/CANADA: 866-883-5430
AUS: 1300-136-851
UK: 0800-5200-468
http://office.com-setup.solutions
Pressing the "Get Started" button redirects to "processing-installation.php" and the source code shows the deception :
[color=blue]view-source:office.com-setup.solutions/processing-installation.php[/color]
The source code shows it refreshes to:
http://office.com-setup.solutions/installation-error-VR94SH8E-S.html
Also found this in the code:

[code]meta http-equiv="refresh" content="1; URL=http://www.fahimshakir.com/office/index.html"[/code]

https://www.fahimshakir.com

[quote]

Block C-11B, Top Floor, New Ashok Nagar,
Delhi NCR 110096, India
09718925775 09268751849
[email protected]
[email protected]

[/quote]

888-814-2078
https://setupoffize.com
setupcomoffices.com (parked)
https://activateantivirus.com

844-903-6333
https://www.officesetup-install.com
233 78th Street New York, NY 10032 (fake address that came with Theme)

https://webcache.googleusercontent.com/search?q=cache:KqAabCIXMLsJ:https://www.officesetup-activation.com/contact-us/

Previous Scammer.info reference:
http://scammer.info/d/11346-microsoft-scam
http://scammer.info/d/14158-new-scammer-for-brother-888-267-6495/5

888-786-8174
updateneeded.xyz/reminder/ (fake popup) http://i64.tinypic.com/f3g6er.jpg
http://fastmaximumservices.com
supportlab.us (suspended)
-61 LARCH STREET, CARTERET, NEW JERSEY 07008 (house)

844-882-6746
loginrouternet.com (unavailable)
-61 LARCH STREET, CARTERET, NEW JERSEY 07008 (house)

https://infaillable.online
-18531 Bryant St, Northridge, CA 91324 (house)

209-753-4585
infalliblesolutions.com
-18531 Bryant Street Northridge CA 91324

951-566-4848
818-993-2838 (Mirza Asim Khan)
MidWell Technosys
midwelltechnosys.com (unavailable)
-18531 Bryant St, Northridge, CA 91324
https://www.corporationwiki.com/p/2ylzho/midwell-technosys-llc

[b]Connected websites: [/b]

http://msofficesetup.org
https://www.office.com-setup.download
http://www.ms-officesetup.com/office-setup-help/
https://https-www-office.com/setup/
https://www.ms-officesetup.com
https://ww-woffice.com/setup/
https://www.officecommsetup.com
http://www.office.com-setup-office.com/
https://wwwofficecomsetup-office.com
https://officesetup-officecomsetup.com
https://www.install-office-setup.com
http://officecom-setup.com
https://www.officesetup.help
https://install-office.com/setup/
https://www-office-com-setup.net
http://www.office-myaccount.com
https://www-office-com-setup.net
http://www.installationassistance.com/office-com-setup/

https://www.microsoftliveassist.com/eror-code-ooxooo16fa-office-setup/

Here they admit its a scam, but say its hackers and they can fix the error with a clean up. They provide no numbers, just chat.

http://www.windowschatsupport.com
https://www.winchatsupport.com

Some of their deceptive websites they talk about:

Page redirects:

[code] view-source:officecom.website view-source:officecom.website/form-to-email.php view-source:officecom.website/processing.html http://officecom.website/sorry.html (866 999 7875)

view-source:office.key-redeem.services
view-source:office.key-redeem.services/office/download
view-source:office.key-redeem.services/office/error-found
view-source:office.key-redeem.services/office/office-installation-error-found

view-source:https://cardsredeem.com/id1/?
view-source:https://cardsredeem.com/id1/email.php
view-source:https://cardsredeem.com/id1/0XCC48NS8/index.html
[/code]

They are the only ones using "Error: 0XCC48NS8" I have found.
I found this from searching "error code: OOXOOO16FA"
http://fixcomputerfan.com/error-code-ooxooo16fa.php?topic=Privacy%20Protector

888-814-2078

https://setupoffize.com

setupcomoffices.com (parked)

https://activateantivirus.com

https://mcafeecomactivatenow.xyz

http://webcache.googleusercontent.com/search?q=cache:BWrs20N3ghoJ:esupportonline.site/

http://mcafeecomactivatekey.us

Page redirects:
http://mcafeecomactivatekey.us/sendemail.php
view-source:mcafeecomactivatekey.us/downloading.html
view-source:mcafeecomactivatekey.us/error.html
http://mcafeecomactivatekey.us/nortonerror.html (888 814 2078)

http://call.contact-support-phone-number.com/bitdefender-support-number/
Midway on the page (next to blue image of tech cartoon person) it says call 888-814-2078 for support.
http://i63.tinypic.com/25g9oad.jpg
[b]Main page number is 855-273-5444 and links it to MC Helper.[/b]

Previous Scammer.info references:
http://scammer.info/d/20999-my-computer-helper-mchelper-compilation-of-numbers-domains

[b]More linked Tech Support websites/numbers:[/b]

844-644-2559
http://callonsupportnumber.com
onlinesupportnumber.info (expired)

888-996-4263
fruitionservice.com (expired)
onlinesupportnumber.info (expired)
globalsupportforinstanthelp.site (shutdown)
http://emailsupportsservice.com
http://rokuactivationservice.com
-18531 Bryant Street Northridge CA 91324
https://printerphonesupport.com
http://www.callonsupportnumber.com/Kaspersky/

888-786-8174
http://www.callonsupportnumber.com/Kaspersky/privacy-policy.html

866-999-7875
http://officecom.website/sorry.html
reversethenation.com (shutdown)
http://webcache.googleusercontent.com/search?q=cache:4UgNQoyUoLQJ:reversethenation.com/contact/ (May 2019)
https://web.archive.org/web/20180804222606/http://reversethenation.com/

Today I found they are impersonating Amazon TV/Streaming. They changed their number twice but same website

Fist number VM hacked by a good Samaritan.

https://amazon.mytv-codes.site/Err_Cd_OOXOOO16FA_crl-id_c147654ad-41fg-ds7df-cfa9f5jhdjhsg
Contact Amazon Tv Customer Care Toll Free. 1-833-559-0429
Error code: AMZ0TVX16FA and Correlation ID: c147654ad-41fg-ds7df-cfa9f5jhdjhsg
(845) 250-9890
845-285-9098