PC Protection Help LLP: Fake virus popup scammers

PC Protection Help LLP are based in Jaipur, India. This is their address:

66/114, Pratap Nagar, Sanganer, Sector 11, Pratap Nagar, Jaipur, Rajasthan 302033, India

They are also known as Compiko.online, estudiosos.online and StudioSOSOnline.com
They have stolen over $100,000 from victims in the USA and Canada in the last 6 months.
The direct phone number that they give to victims is 1-888-507-0207. Everyone's customer ID is 12157E4

They use the following URL to seed with advertising servers. This will redirect to their latest popup which is hosted on Amazon's S3 servers:
hxxps://www.4080err044.club/15Gm7U?source_id={$source_id}&cc={$cc}&domain_id={$domain_id}&campaign_id={$campaign_id}&os={$os}&browser={$browser}&orientation={$orientation}&creative_id={$creative_id}&cost={$cpv}&external_id={$click_id}

And example of one of their recent popups:

https://tlscommunity.com/assets/2021-02-22/13:52:090-2021-02-11popuppng.png

There are 4 individuals who operate in Jaipur:
Steve = Nishant (Nishu) Jain - this is the boss in India
Paul = Anish Patni
Sam = Sunil Shahi [See https://facebook.com/SunilShashiAnna/ ]
Rick = Vineet Jain

https://tlscommunity.com/assets/2021-02-22/14:12:150-compikoteampng.png

Their fake company is called "COMPIKO" and has the following website: https://compiko.online
Their claimed address is:
295 Mt Vernon St, Dedham, MA 02026

This address is the home address of the US owner of Compiko, one Richard Padula
Richard pays for the phone services of Compiko. This is the Vonage Business receipt for their phone calls:

https://tlscommunity.com/assets/2021-02-22/13:58:330-vonageinvoicepng.png

Their payment gateways are as follows:

PayPal: [email protected]

EDEBIT: https://prod.edebitdirect.com/app/payment/ee2a25fe86ec4205b28daf2a420fea5b/ “Studio SOS LLC”

Bookfrontworld: https://www.bookfrontworld.com/payment-authorisation-form/

EStudio SOS: http://estudiosos.online/?product=software-support-mega & https://estudiosos.online/?page_id=2

Their activities are documented in a YouTube video here: https://youtu.be/OkCjz7gdePw [Live at 7pm GMT on 22/02/2021]

2 Likes

Very good, glad to see some more popup scammers get exposed. Can’t wait for the video!

Hey Jim, great work, I’ve already reported https://compiko.online/ and estudiosos.online to their domain host (hostinger) citing this post, but studiososonline.com appears to redirect to malicious sites/malvertising so not much I can do about that except report to google safe browsing and netcraft (already done).

Keep up the amazing work exposing these idiots!!!

1 Like

@Zachinquarantine_#179163 Great stuff. Thanks for reporting them.

1 Like

@Zachinquarantine_#179163 Update: the malvertising site redirects me to (hxxps://irc.lovegreenpencils.ga/) which I assume is another malvertising site, and so on.

Richard Padula’s Facebook page: Redirecting...

3 Likes

Oh My God.

His Profile Says he is a politician of the Ruling Party.

Nasty Political Connections.

You're Doing Great Job. Jim

2 Likes

Great work Jim, another thing:

`(888) 507-0207` is provided by Real Time Cloud Services, LLC (https://www.myrealdata.com/)
Provider seems to be supporting scams and has a complaint on this: https://www.bbb.org/us/ny/new-york/profile/web-hosting/real-time-cloud-services-llc-0121-140231/complaints#0

Report the number to them, but wouldn't expect action. I may do a writeup on Real Time Cloud Services at a later date, if I find more claims against them - Scammers will leverage this company, lets not allow that.

2 Likes

Update: https://compiko.online/ is offline :slight_smile:

1 Like

Nishant Jain / Nishu Saklecha from Agra Facebook profile: Facebook

1 Like

Vineet Jain’s fb profile: Redirecting...

1 Like

@Vinsmoke2#179222 That’s why the Indian cops are not responding to Jim’s messages.

1 Like

fb profile of wife of Nishan Jain, Aishwarya Saklecha from Bilaspur, UP Redirecting...

fb profile of wife of Vineet Jain, Chanchal Bhadouria Jain: Redirecting...

1 Like

As an update, the site has been taken down and it says its 503 Service unavailable

1 Like

Richard does have another website that he runs his scam from

https://fix69.com/contact-us.html

Great domain

1 Like

Owner Richard Padula’s LinkedIn profile

https://www.linkedin.com/in/richard-padula-a45341192/

Listed on the page:
Chief Executive Officer at fix69.com

Screenshots of the site Fix69.com:
https://imgur.com/a/k2Gs3ey

Phone numbers listed:
1-844-908-0404 - no longer in service
1-800-491-3022 - "the user you are trying to reach is unavailable"

Head office address:
295 Mt. Vernon St. Dedham
Massachusetts 02026

Social medias listed onsite:
https://www.facebook.com/fix699
https://twitter.com/fix69fix69
https://www.instagram.com/fix69fix69/
https://www.linkedin.com/in/richard-padula-a45341192/

Bit.ly shortcut linked on their Instagram linking to Fix69:
http://bit.ly/fix6969

Social media post dates (when Fix69 was functioning):
Facebook - Joined August 30, 2019, latest post Feb 4, 2020
Twitter - Joined August 2019, latest post Feb 4, 2020
Instagram - First post September 5, 2019, latest post Feb 4, 2020

The website Fix69 has no current working phone numbers, making it defunct. That being said, I'm sure it was used to scam at one time. It lists the home address of Richard Padula as well as the LinkedIn I originally found. Hopefully Richard and his employees are brought to justice.

1 Like

@being#179311

All other social medias I could find:

https://www.starthub.org/startups/fix69

https://in.pinterest.com/fix69online/

• Fix69 • Dedham • Massachusetts •

Important to note that their Starthub lists the company as founded in 2019. It dumbfounds me that Richard lists his real name and address in all this info. He doesn't even try to hide the fact that he owns these obvious scam operations. What an idiot.

Thank you Jim.

My March 2020 records show Paypal account [email protected] (Aishwarya Jain)

Possibly related to TechliveConnect (Premium Techie Support) of Gurgaon

Seems connected to fix69.com summittechnology.us rapidconcepttech.com

http://scammer.info/d/33696-1-855-246-8689-tech-support-scam/8

https://curtisknight.com/meet-the-team/meet-our-djs/rich-padula/

Richard apparently works as a Wedding DJ for Curtis Knight Entertainment. I wonder if they know that he's scamming people as a side hustle.