Web InfoTech, LLC/WeConnect Soft Solutions Pvt Ltd/Garage2Global Ventures Pvt Ltd

Also not working for me i think they shut the fake detail pages down.

1 Mi Piace

Do we have anything on them dumping the numbers to the “100 dollar rewards” scams? Are they like sold off or part of the same operations?

2 Mi Piace

My guess is that it’s neither; more likely that the printer scammers stopped paying the bill for the old number and the retail rebate/medical alert/scam roulette group grabbed it as soon as it became available.

3 Mi Piace

Those scam roulette ones and airline scammers don’t get enough attention from us

3 Mi Piace

Now a new subdomain: enginetop.us3.my – see link from https://activateuhccom.github.io/ via ww0.us. And another subdirectory revealed by Google: Welcome to Quicken | Quicken .

1 Mi Piace

Some other active feeder sites via ww0.us:

https://capitalonecomactivate.jimdosite.com/

https://activateuhccom.xyz/

1 Mi Piace

Still active with a new destination domain and a new toll-free number!

Spam feeder page How Do I Enter the Code for Amazon Prime Video on My TV? links to https://az.redircoms.com/ , which redirects to https://az.myactiveprod.site/ , with the inevitable fake error page Code Verification Failed , phone number 855-564-2883.

2 Mi Piace

Still active and advertised on the fake HP printer driver error page.

2 Mi Piace

Here’s another fake HP site that links to the ww0.us redirector, associated with Web Infotech.

1 Mi Piace

Site still active, new number for fake HP: 856-554-9908.

2 Mi Piace

God Bless Jim Browning and Karl Rock!

2 Mi Piace

New phone number: 833-565-9855. But when I dial it I get the Comet Media-like dial-a-scam roulette IVR, not anything printer-related.

1 Mi Piace

Phone number is still active, but on a slightly different final domain: https://ms.actprod.site/ms/error-found.php . Also, a new corresponding Google pages spam site linking to the fake MS Office activation charade site: portal.office.com login - How to login into Portal Microsoft Office Account .

1 Mi Piace

Now this phone number is recycled on another fake error/phishing page for Garmin devices

https://garmincomexpresss.github.io/ links to the redirector https://fm.ci/?aHR0cHM6Ly9nYXJtaW5jb21leHByZXNzcy5naXRodWIuaW8= , which redirects to https://us400.my/garmin.com/

How many subdirectories does us400.my have? Here are some I found by guessing:

Domain has moved to us315.my.

New usXYZ.my domain, same scam:

https://us807.my/vizio.com/contact-service.php

New number: 888-850-2482. Click “Request Call from Support” for an inbound call from a spoofed number.

Feeder page: How To Enter Code vizio.com/setup to Safely Link My Vizio TV? via redirector site https://pre.im/?8mOupmKjdyvgaFQg8S9bE5wxMlDfzMDbwzk8BSOeWCP8aqOoTfqkam

pre.im is on CloudFlare and has a TXT record indicating that its owner uses the “brevo” mass emailing service brevo-code:f2a51cd82a4062fb5c034fe7ebc51df2.

A new domain, and a new phone number:

856-554-9813.

New website and phone number!

links to

Fake error page and phone number: 855-703-4113.

New contact info:

https://myustech20.com/youtube.com/contact-service.php

feeder site: Connet your YouTube To Smart TV

Toll-free scammers for each and everything: 855-512-2206. I spoke to Max from Support. His favorite color is olive.

Update: now advertising 855-428-7334 again. They have used this number for a long time.

Update 2: Multiple representatives of this scam today identified themselves to me as “Web Infotech.” Now, this always was a very generic name. Is it really the same organization as all these years ago? I don’t know. But there is a “Web Infotech” somewhere in South Asia, and they are still running tech support scams.

New toll-free number! 855-484-0909.

https://myustech20.com/quicken.com/contact-service.php

Spam page How to Download Quicken: Step-by-Step Guide-Quicken Download links to https://link72.com/?Qxbc7fsbpx3FaUD8qxwXH5Dqy9PQYZbGQZFVyBRLt9bQeH83ZSE6DRAAPlWwUTdLWB3dBUJ973QrkZJLXi9nxfgpvzdaKq8YmBwdxkWhSxYyBDNJyG2OYxRfMP5tjJVtvPju7 (link72.com is the successor to the defunct ww0.us phishing redirector domain.) If your user-agent flags are correct you will be redirected to a phishing form, then to the fake error. If not, you will see an AI-slop pseudoinformational page about Quicken.