Domain Host: Hostinger
Domain IP: 34.120.137.41 
Carrier: Mayfair Communications
Status: Parked for pick-a-scam.
The scammers now use (805) 302-5118
Carrier: T-Mobile
Call Center Location: India 
Answers as: “Suppoat” or “Norton”
Technician: “Kevin”
Remote Access Software: ConnectWise from mrhelp.top (Nickname: “Secure Server” Code: 21AW57Z) or UltraViewer (Nickname: “AI Securities,” ID: 74076308/GALAXY, 50396823/DESKTOP-BHOLENA)
I faked there being an issue with checking out on their website and “Kevin” needed me to “install some drivers” to resolve the issue. I was asked to open my browser and open Google.com from the run box.
- I then faked his ConnectWise download not working, so the incredibly-impatient “Kevin” falsely claimed that there were drivers missing from my device and that I needed to install UltraViewer to have their “AI” fix the problem.
- Once he and his friend remotely connected to my virtual machine with UltraViewer, the call was dropped and I was asked to call him back on his personal Google Voice line (252) 336-6490 and check for a confirmation email on the computer, so I responded by saying I use an iCloud email that can only be accessed on my phone.
- The scammers then downloaded Remote Utilities 7 by Remote Utilities, LLC from a MediaFire download page and caught onto the fact that I was using a virtual machine to the point of setting a 6-digit master password, but I managed to shrug it off.
- The scammer then attempted to view my webcam and asked me to purchase the software from their website, but I told them I couldn’t do so as they were attempting to uninstall UltraViewer They then refused to “suppoat” and instead asked me to call Norton