Norton scam (662) 666-7004 "invoice"

Would it be alright if I include some of your recordings for a special Scambait Sunday video I plan on working on this coming weekend?

Magic Jack line.

Sure thing!!

Here’s a preview.

Overheard a victim at Target
https://soundcloud.com/nigella-blum/norton-victim

That is awesome!
Thank you for sharing @OfclyGoodenough :innocent: :innocent:

888-235-9308 Still Active Kevin Saturday 11-18-23 8:59PM EST

888-235-9308 Still Active Sunday 11-19-23 8:26PM EST

They run McAfee scam too
takeremote.com
gtpsinc.com/webpay
PC Advisors

they also have the following websites:

https://www.onlineantivirushelp.live/
https://www.onlineantivirushelp.online/
https://www.geekhelps247.com/

There are at least 2 caller agents that I am aware of, I can’t remember the name of the 2nd one, but good ol’ kevin is still alive and well.

Thanks for all of this valuable information! I’m currently compiling a big report on them now.

There is a Nancy too.

All 3 websites are registered via NameCheap and have CloudFlare-protected IP addresses. However, the websites each list a different phone number.

  • ‪(833) 754-4031‬ (Avoxi line for “Online Antivirus Help.live”)
  • ‪(888) 235-9308‬ (Avoxi line for “Online Antivirus Help.online”)
  • ‪(866) 988-6801‬ (Voyce line for “GeekHelps for Antivirus”)

When I dialed the (833) number, however, I was redirected to the voicemail for TechClub, which is listed on the Better Business Bureau as operating out of a rural house in Garrison, New York and on ZoomInfo as operating out of the same Cheyenne, Wyoming apartment complex @ecosoftware claims to operate from. @J5wingo123 actually reported this company for impersonating Microsoft on April 24, 2018, though the number has since been repurposed for a hospital.

@DrWat revealed that the company also operates under the leadership of Rajat Chandwani (pictured) as AllTimeDesk, which claims to operate from the same Cheyenne, Wyoming apartment complex and a duplex residence in Oshawa, Ontario, Canada as a subsidiary of Elevated Support Services, Inc, Other subsidiaries of the company include:

Elevated Support Services, Inc. is a North American front for US4 Business Solutions Private Limited., an IT Service company operating out of I, 1402, Badshahpur Sohna Rd Hwy, Park View City 1, Sector 48, Gurugram, Haryana 122018, India. The company also operates as Perfomatrix EServices Private Limited. A separate listing for this company will be uploaded to the Wall of Shame.

Associated LinkedIn Accounts:

Associated Phone Numbers:

  • ‪(315) 670-3696‬ (Nuso)
  • ‪(877) 783-3391 (Voyce)
  • ‪(561) 657-4132‬ (PEERLESS)
  • ‪(315) 670-3633‬ (Nuso)
  • ‪(866) 988-6796‬ (Toll-free listed on AllTimeDesk, unknown carrier)
  • ‪(323) 405-6683‬ (PEERLESS)
  • ‪(844) 440-1682‬ (Voyce)
  • ‪(855) 973-2094‬ (Avoxi)
  • ‪(844) 440-1574 (Voyce)
  • ‪(941) 265-4862‬ (PEERLESS)
  • ‪(844) 301-7028‬ (Voyce)
  • (855) 909-0283 (Voyce)
  • ‪(772) 807-3274‬ (PEERLESS)
  • ‪(833) 318-2261‬ (Voyce)
  • ‪(844) 440-1696‬ (Voyce)

Associated Email Addresses:

Associated IP Addresses:

  • 18.189.92.34 :us: (Amazon)
  • 31.220.18.187 :us: (Hostinger)
  • 199.59.56.52 :us: (HostWinds)
  • 18.218.114.186 :us: (Amazon)

US4 BUSINESS SOLUTIONS PRIVATE LIMITED

Apartment / FLAT NO 1402, 14TH FLOOR, TOWER 1, PARK VIEW CITY SOHNA ROAD GURGAON Gurgaon HR 122018 IN

Jyoti Chandwani - Sindhi female
Rajat Chandwani - Sindhi male

Naveen Chandwani - Sindhi male
9672 Sweetleaf St, Orlando, Florida, 32827, United States

Global Technology Partners

407-850-5901
aka Redfire Technologies redfire1.com

how do y’all find out information like this? I’ve done a lot of meticulous research on this group for like 3 months, and maybe it’s because I’m just not very good at this, but I’ve gotten absolutely nothing.

In my case, I look up every number and run each website through whois.com and urlscan.io. As a lot of their websites are pretty much a copy/paste of one another, I also copied a specific piece of text and searched for it on Google.

I also searched for Rajat Chandwani on ZaubaCorp and found a listing for him as director of US4 Business Solutions. I checked their website and called the toll-free number listed to fully verify that this was the true identity of the scam organization.

Thanks!

No, I mean you pull like information such as names, IP, and location, where all I can get is like 7 separate domains. Also, their websites do have their other domain names on them on accident.

No. These scammers did their best to omit that information but forgot to make each site look totally different from one another.

There are a lot more website entities and numbers for this place which have been operating as traditional tech support for many years
All their websites are a basic copy of each other with only minor or no differences

This number has been active for years associated with this website offshoot for printer support
8882359308 PC Help Store Printer
https://www.pchelpstore.com/portfolio/home-printer/
https://www.pchelpstore.com/portfolio/wireless-printer/
https://www.pchelpstore.com/portfolio/thermal-printer/
https://www.pchelpstore.com/portfolio/classic-collection/
https://www.pchelpstore.com/portfolio/scanner/
https://www.pchelpstore.com/portfolio/coppier-printer/
https://www.pchelpstore.com/portfolio/blutooth-printer/
https://www.pchelpstore.com/portfolio/wifi-printer/

All the websites are a basic copy of each other
8333182259 Pro PC Wizard
8333182262 Pro PC Wizard
8333182263 Pro PC mechanic
https://propcmechanic.com/
3152264389 Pro PC mechanic
https://propcmechanic.com/
8337544031 Online Anti Virus Help
https://www.onlineantivirushelp.live/
8444401679 ProPCDefender
https://www.propcdefender.com/
8444401684 Techclubsupport
https://techclubsupport.com/
8444401694 ProPCDefender
https://www.propcdefender.com/
8444401695 ProPCDefender
https://www.propcdefender.com/
8559090282 Pro PC Expert
8559090283 Pro PC Expert
8669886785 AllTimeDesk printer support
8669886786 AllTimeDesk printer support
8669886791 AllTimeDesk printer support
8669886792 AllTimeDesk printer support
8669886797 Online Anti Virus Help
https://www.onlineantivirushelp.website/
https://www.onlineantivirushelp.online/
https://www.geekhelps247.com/
8669886801 Online Anti Virus Help
8777833392 TechClub

There are probably more related to this place that will turn up when I do a deeper search through my databases

These numbers all route to the same call center/group.
All their old website identities are now dead
They are answering now as Pro PC Shield, instead of the All Time Desk printer support they used to be

8669886785 ProPCShield was AllTimeDesk printer support

8669886786 ProPCShield was AllTimeDesk printer support

8669886791 ProPCShield was AllTimeDesk printer support

8669886792 ProPCShield was AllTimeDesk printer support

New number with website
8885714026 ProPCShield

https://www.propcshield.com/

8669886797 Online Anti Virus Help

These still answer as All Time Desk
8669886796 AllTimeDesk printer support

3156703633 AllTimeDesk printer support

All their old websites are now either dead or the numbers on them are all not associated with them
Two of the old numbers are now answered by different unrelated companies

https://printergeeks.online/
https://www.alltimedesk.com/
https://epsonprinterissues.com/
https://brotherprintersetups.com/
https://antivirusplanet.com/
https://www.onlineantivirushelp.website/
https://www.onlineantivirushelp.online/
https://www.geekhelps247.com/