RingCentral, “Francis William” answered as “Customer Suppoat for McAfee, PayPal, Geek Squad and Venmo”
- As I never received an invoice number, “Francis” asked for my name before falsely claiming the payments were for an antivirus service, prompting me to “cancel” by “opening the Google Chrome” by going to conline.life (IP: 188.114.97.3 :nl:), an iFrame of pvalue.top (Code: 66198, IP: 144.126.156.55
). I faked hte download not working, and they hung up on me. - I called back, and the bhenchod falsely claimed my nonexistent PayPal account was used by a hacker in Dayton, Ohio, prompting me to “cancel” by going to mhelp1.org (Code: 91215, IP: 2606:4700:3036::6815:44d7 ). I faked the download not working once more, and the scammers stopped taking calls.
https://value247.us/ (IP: 104.21.8.239 ) is an iframe of https://bmck.us:8443/guest.aspx (IP: 144.126.145.35 )