Carrier: RingCentral
Status: Will hang up if calling from a non-mobile number.
Call Center Location: Kolkata, West Bengal, India 
Answers as: “Suppoat Team,” “Roku,” “Geek Squad,” “PayPal” or “Norton”
Technicians: “Alex,” “John Wilson”
Falsely Claims: Technical Problem
Scammer Website: gs.nt01.org, rk.nt01.org or nrt.nt01.org
Domain IP: 162.241.123.167 
Remote Access Software:
- Support 1 - ConnectWise from xrhelp.online (Nickname, “Robotic Server,” Code: 87960)
- Support 2-3, 5-6 - AnyDesk
- Support 4 - TeamViewer
- Support 7-8 - AweSun
- Support 9 - UltraViewer
After berating me for “shouting” when I was using my normal speaking voice, the bhenchod became too invasive to provide “suppoat.” But since they gave me their website, I opted to conduct some traceback efforts and found several TechScammersUnited posts by ScammerRevolts and older scammer.info posts that revealed that they used the following:
Phone Numbers:
- (843) 301-2292 (T-Mobile, answers as PayPal)
- (805) 661-0461 (Busy T-Mobile)
- (808) 751-2163 (Onvoy, out of service)
- (805) 207-0356 (T-Mobile, out of service)
ConnectWise Domains:
- xacare.help
- pdhelp.top
- zdcare.help
- cxsupport.org
https://techscammersunited.com/t/norton-refund-scammer-843-301-2292/30504
https://techscammersunited.com/t/norton-refund-scammers-805-661-0461/30452
I then proceeded to bait one of these numbers and was asked to fill out a refund form and log into my nonexistent bank account.
- Since I don’t do online banking, the scammers repeatedly attempted to search for my fake bank before opening the Command Prompt and asking me to provide my name, phone number, email address, bank name and the last 4 numbers on my bank account to their “online Chase Bank server.”
- I was also asked to provide the “refund amount,” which they later manipulated to $59 before asking me to fill out everything again, with the refund amount now being manipulated to $599,999.
- I was then asked to go to my local branch or purchase $100 gift cards from a nearby CVS while they blanked my screen with a fake software update.
- I was then asked to hang up the line and accept a callback from his “supervisor,” who used the Canadian phone number (519) 714-0896 and purchase 5-10 $500 gift cards from a local supermarket, but I refused on the grounds of every store closing due to a massive snowstorm.
- I then asked if I could write a check, and he falsely claimed to be from Chase Bank.
