microsoftrefund333.wixsite.com/online
they will take you to that website to fill out a forum to give a refund then ask for money via western union or any bank really.... i used wireshark on there call i will try and update with a IP addr later if i can find it.
they will also log onto your VM to do that refund
BobRTC link: https://bobrtc.live/phonebook/dial/18446400874
["+1 (844) 640-0874",“Microsoft Refund Scam +1 (844) 640-0874”]
[[3,15,39,73],[3,15,37,39,73]]
@NeeP#110212 omg i forgot. thanks for adding that
@sudophreak#110219 No issue
i messaged wix and got the website taken down withen minutes