Norton scam (662) 666-7004 "invoice"

Would it be alright if I include some of your recordings for a special Scambait Sunday video I plan on working on this coming weekend?

1 Like

Magic Jack line.

3 Likes

Sure thing!!

1 Like

Here’s a preview.

2 Likes

Overheard a victim at Target
https://soundcloud.com/nigella-blum/norton-victim

2 Likes

That is awesome!
Thank you for sharing @OfclyGoodenough :innocent: :innocent:

2 Likes

888-235-9308 Still Active Kevin Saturday 11-18-23 8:59PM EST

14 Likes

888-235-9308 Still Active Sunday 11-19-23 8:26PM EST

13 Likes

They run McAfee scam too
takeremote.com
gtpsinc.com/webpay
PC Advisors

they also have the following websites:

https://www.onlineantivirushelp.live/
https://www.onlineantivirushelp.online/
https://www.geekhelps247.com/

There are at least 2 caller agents that I am aware of, I can’t remember the name of the 2nd one, but good ol’ kevin is still alive and well.

Thanks for all of this valuable information! I’m currently compiling a big report on them now.

2 Likes

There is a Nancy too.

1 Like

All 3 websites are registered via NameCheap and have CloudFlare-protected IP addresses. However, the websites each list a different phone number.

  • ‪(833) 754-4031‬ (Avoxi line for “Online Antivirus Help.live”)
  • ‪(888) 235-9308‬ (Avoxi line for “Online Antivirus Help.online”)
  • ‪(866) 988-6801‬ (Voyce line for “GeekHelps for Antivirus”)

When I dialed the (833) number, however, I was redirected to the voicemail for TechClub, which is listed on the Better Business Bureau as operating out of a rural house in Garrison, New York and on ZoomInfo as operating out of the same Cheyenne, Wyoming apartment complex @ecosoftware claims to operate from. @J5wingo123 actually reported this company for impersonating Microsoft on April 24, 2018, though the number has since been repurposed for a hospital.

@DrWat revealed that the company also operates under the leadership of Rajat Chandwani (pictured) as AllTimeDesk, which claims to operate from the same Cheyenne, Wyoming apartment complex and a duplex residence in Oshawa, Ontario, Canada as a subsidiary of Elevated Support Services, Inc, Other subsidiaries of the company include:

image

Elevated Support Services, Inc. is a North American front for US4 Business Solutions Private Limited., an IT Service company operating out of I, 1402, Badshahpur Sohna Rd Hwy, Park View City 1, Sector 48, Gurugram, Haryana 122018, India. The company also operates as Perfomatrix EServices Private Limited. A separate listing for this company will be uploaded to the Wall of Shame.

Associated LinkedIn Accounts:

Associated Phone Numbers:

  • ‪(315) 670-3696‬ (Nuso)
  • ‪(877) 783-3391 (Voyce)
  • ‪(561) 657-4132‬ (PEERLESS)
  • ‪(315) 670-3633‬ (Nuso)
  • ‪(866) 988-6796‬ (Toll-free listed on AllTimeDesk, unknown carrier)
  • ‪(323) 405-6683‬ (PEERLESS)
  • ‪(844) 440-1682‬ (Voyce)
  • ‪(855) 973-2094‬ (Avoxi)
  • ‪(844) 440-1574 (Voyce)
  • ‪(941) 265-4862‬ (PEERLESS)
  • ‪(844) 301-7028‬ (Voyce)
  • (855) 909-0283 (Voyce)
  • ‪(772) 807-3274‬ (PEERLESS)
  • ‪(833) 318-2261‬ (Voyce)
  • ‪(844) 440-1696‬ (Voyce)

Associated Email Addresses:

Associated IP Addresses:

  • 18.189.92.34 :us: (Amazon)
  • 31.220.18.187 :us: (Hostinger)
  • 199.59.56.52 :us: (HostWinds)
  • 18.218.114.186 :us: (Amazon)
3 Likes

US4 BUSINESS SOLUTIONS PRIVATE LIMITED

Apartment / FLAT NO 1402, 14TH FLOOR, TOWER 1, PARK VIEW CITY SOHNA ROAD GURGAON Gurgaon HR 122018 IN

Jyoti Chandwani - Sindhi female
Rajat Chandwani - Sindhi male

Naveen Chandwani - Sindhi male
9672 Sweetleaf St, Orlando, Florida, 32827, United States

Global Technology Partners

407-850-5901
aka Redfire Technologies redfire1.com

1 Like

how do y’all find out information like this? I’ve done a lot of meticulous research on this group for like 3 months, and maybe it’s because I’m just not very good at this, but I’ve gotten absolutely nothing.

2 Likes

In my case, I look up every number and run each website through whois.com and urlscan.io. As a lot of their websites are pretty much a copy/paste of one another, I also copied a specific piece of text and searched for it on Google.

I also searched for Rajat Chandwani on ZaubaCorp and found a listing for him as director of US4 Business Solutions. I checked their website and called the toll-free number listed to fully verify that this was the true identity of the scam organization.

2 Likes

Thanks!

No, I mean you pull like information such as names, IP, and location, where all I can get is like 7 separate domains. Also, their websites do have their other domain names on them on accident.

1 Like

No. These scammers did their best to omit that information but forgot to make each site look totally different from one another.

There are a lot more website entities and numbers for this place which have been operating as traditional tech support for many years
All their websites are a basic copy of each other with only minor or no differences

This number has been active for years associated with this website offshoot for printer support
8882359308 PC Help Store Printer

All the websites are a basic copy of each other
8333182259 Pro PC Wizard
8333182262 Pro PC Wizard
8333182263 Pro PC mechanic
https://propcmechanic.com/
3152264389 Pro PC mechanic
https://propcmechanic.com/
8337544031 Online Anti Virus Help
https://www.onlineantivirushelp.live/
8444401679 ProPCDefender
https://www.propcdefender.com/
8444401684 Techclubsupport
https://techclubsupport.com/
8444401694 ProPCDefender
https://www.propcdefender.com/
8444401695 ProPCDefender
https://www.propcdefender.com/
8559090282 Pro PC Expert
8559090283 Pro PC Expert
8669886785 AllTimeDesk printer support
8669886786 AllTimeDesk printer support
8669886791 AllTimeDesk printer support
8669886792 AllTimeDesk printer support
8669886797 Online Anti Virus Help
https://www.onlineantivirushelp.website/
https://www.onlineantivirushelp.online/
https://www.geekhelps247.com/
8669886801 Online Anti Virus Help
8777833392 TechClub
https://www.techclub.com/

There are probably more related to this place that will turn up when I do a deeper search through my databases