Nt01.org, Kolkata-based bhenchods

888-929-1614

Same old scam . Came as a PDF and it does not even have the correct email but of course they are too stupid to realize that.

4 Likes

Carrier: RingCentral
Status: Will hang up if calling from a non-mobile number.
Call Center Location: Kolkata, West Bengal, India :india:
Answers as: “Suppoat Team,” “Roku,” “Geek Squad,” “PayPal” or “Norton”
Technicians: “Alex,” “John Wilson”
Falsely Claims: Technical Problem
Scammer Website: gs.nt01.org, rk.nt01.org or nrt.nt01.org
Domain IP: 162.241.123.167 :us:
Remote Access Software:

  • Support 1 - ConnectWise from xrhelp.online (Nickname, “Robotic Server,” Code: 87960)
  • Support 2-3, 5-6 - AnyDesk
  • Support 4 - TeamViewer
  • Support 7-8 - AweSun
  • Support 9 - UltraViewer

After berating me for “shouting” when I was using my normal speaking voice, the bhenchod became too invasive to provide “suppoat.” But since they gave me their website, I opted to conduct some traceback efforts and found several TechScammersUnited posts by ScammerRevolts and older scammer.info posts that revealed that they used the following:

Phone Numbers:

  • (843) 301-2292 (T-Mobile, answers as PayPal)
  • (805) 661-0461 (Busy T-Mobile)
  • (808) 751-2163 (Onvoy, out of service)
  • (805) 207-0356 (T-Mobile, out of service)

ConnectWise Domains:

https://techscammersunited.com/t/norton-refund-scammer-843-301-2292/30504

https://techscammersunited.com/t/norton-refund-scammers-805-661-0461/30452

I then proceeded to bait one of these numbers and was asked to fill out a refund form and log into my nonexistent bank account.

  • Since I don’t do online banking, the scammers repeatedly attempted to search for my fake bank before opening the Command Prompt and asking me to provide my name, phone number, email address, bank name and the last 4 numbers on my bank account to their “online Chase Bank server.”
  • I was also asked to provide the “refund amount,” which they later manipulated to $59 before asking me to fill out everything again, with the refund amount now being manipulated to $599,999.
  • I was then asked to go to my local branch or purchase $100 gift cards from a nearby CVS while they blanked my screen with a fake software update.
  • I was then asked to hang up the line and accept a callback from his “supervisor,” who used the Canadian phone number (519) 714-0896 and purchase 5-10 $500 gift cards from a local supermarket, but I refused on the grounds of every store closing due to a massive snowstorm.
  • I then asked if I could write a check, and he falsely claimed to be from Chase Bank.
3 Likes

Imagine my shock. Ring Central hosting scammers and robocalling?
Can’t be

3 Likes

MORE DOMAINS:

2 Likes

8889291614 Geek Squad support refund

1 Like