Microsoft Scam Support #3

Scams Tech Support Scam
, ,
1

Scam Number: 855-493-0922
Scammer’s Website or Email: 1. https://orca-app-r69i2.ondigitalocean.app/werrx01/?phone=+1-855-493-0922&tblci=GiCy5k015agaw_bxY7yrKUu46U5t1dW9KpaTIx81ZmMFUSCflFQonfH80seYwPyeAQ&utm_medium=referral&utm_source=taboola#

06a67c56-aa7b-4306-a168-f84303937235
06a67c56-aa7b-4306-a168-f84303937235771×578 71.4 KB

Additional information about this scam: found on discord on feartoxin

2

(855) 493-0922 Gary answered. Friday 9-16-22 4:45PM EST

3

Report to DigitalOcean

4

The ip addresses come up as CloudFlare, I have reported to them as well.

5

The site is hosted on DigitalOcean, unfortunately CloudFlare won’t care as taking down the IP would take down DO too.

6

CloudFlare sits between the host & the client like a proxy. Cloudflare will not take the site offline, as they do not host the content, but if they do take any action, it will turn off the dns.

7

Cloudflare is a CDN provider not hosting provider. However, I have gotten them to take down a SurfShark phishing site in the past.

8

Yes, I’m aware of what Cloudflare is & how it works. It’s a CDN, as well as DNS. Those ip addresses are not Digital Ocean. If you have the IP address for the digital ocean server(s), I’m happy to report those as well.

dig +short orca-app-r69i2.ondigitalocean.app
104.16.243.78
104.16.244.78

2022-09-16-17:47:55
2022-09-16-17:47:55621×509 35.8 KB

9

The site uses ondigitalocean.app.

10

It’s hosted behind Cloudflare’s proxy/WAF.