Update – 15/12/2014:
A court document reveals just how large this call center was and how much money was involved. In relation to delayed pay after the retraining order…
“non-payment of the Employee Payroll for the Pay Period affects approximately 800 ICE employees, in an amount totaling approximately $1.9 million“
So at least 800 active people on their payroll.
Update – 23/11/2014:
I am glad these guys get caught in the end. The domain (fix22.com) identified in the original post, today, now forwards to http://icereceiver.com/ – it looks like the Federal Trade Commission in Florida have taken action against the company for:
Defendants operate a massive lnternet-based scheme in which they lure
consumers, many of whom are senior citizens, to call an inbound call center and then dupe consumers into purchasing computer technical support services and unnecessary computer security software. Consumers spend from $1 50 to $500 to fix non-existent problems with their computers.
Except in my customer’s case – they called the customer!
I hope they get whatever punishment that the state deems appropriate.
Original Post:
This is a separate scam to the other recent windows scam call I reported on.
Customer has a call with caller ID 8105 from a convincing sounding man from India claiming to be from Microsoft. The excuse this time is “Your windows activation ID needs to be renewed to prevent hackers”.. for which they charged over £100 via credit card but also somewhere in the mix, wanted a Western Union sent to “Eric Abdiel Perez Robles in Panama” too.
The technician “Nick Anderson” (and his reference code, supposedly, IT 8056) had a heavy Indian type accent and has constantly been bothering my customer since with calls as often as every few minutes. Normally he calls every hour or so.
They asked the customer to visit:
http://www.fix22.com/
This domain is registered and hosted with GoDaddy under the following details.
Registrant Name: ICE LLC.
Registrant Organization:
Registrant Street: 4800 T-REX Avenue
Registrant Street: Suite 350
Registrant City: Boca Raton
Registrant State/Province: Florida
Registrant Postal Code: 33431
Registrant Country: United States
Registrant Phone: +1.5617050700
Registrant Phone Ext:
Registrant Fax:
Registrant Fax Ext:
Registrant Email: support@advancedtechsupport.com
which seems to forward to legitimate remote support provider “support.com” on this client url:
https://advancedtech.support.com/connect
At the time of writing this site doesn’t work and may have been suspended by support.com
The above whois information points to “advancedtechsupport.com” which is also registered and hosted with GoDaddy but has a different registration email address (and an invalid phone number – now reported to ICANN):
Registrant Name: ICE LLC.
Registrant Organization:
Registrant Street: 4800 T-REX Avenue
Registrant Street: Suite 350
Registrant City: Boca Raton
Registrant State/Province: FL
Registrant Postal Code: 33431
Registrant Country: us
Registrant Phone: +1.5555555
Registrant Phone Ext:
Registrant Fax:
Registrant Fax Ext:
Registrant Email: rob.deignan@gmail.com
After getting the customer to run the remote support program they spent a long time on the phone and on the computer showing them the customary eventvwr “scary” screen and putting a text file on the customer’s desktop with the contact number “1-800-978-4501” (18009784501 / 0018009784501 / +18009784501).
This number is, at the time of writing, giving an automated message saying that their call center is down.
A printed sheet also lists their telephone number as 0808-189-3370 (08081893370 / +448081893370).
The postal address listed for ATS and the domains seems to also be related to Interclick Inc so possibly related or even more fake address details on the domain / website.
Domains with similar address information in their whois include:
– malwareexperts.com (since Jun 2013 this information has been hidden by GoDaddy privacy service). This “company” list their phone number as “888.847.4130” (+0018888474130 / 8888474130)
– advancedtechsupport.us (also registered at GoDaddy). This domain gives away a bit more information about the company and people involved. We learn that ICE on the previous domains stands for “Inbound Call Experts” (ironic as they are calling people!):
Registry Registrant ID: CR145518388
Registrant Name: Justin Wright
Registrant Organization: Inbound Call Experts
Registrant Street: 4800 T-Rex Avenue Suite 350
Registrant City: Boca Raton
Registrant State/Province: Florida
Registrant Postal Code: 33431
Registrant Country: United States
Registrant Phone: +1.5619836742
Registrant Phone Ext:
Registrant Fax:
Registrant Fax Ext:
Registrant Email: apenn@pcvitalware.com
Registry Admin ID: CR145518390
This domain whois leaks another domain.. pcvitalware.com where the name “Robert Deignan” crops up again but at a different address, still in Florida:
– pcvitalware.com
Registrant Name: Robert Deignan
Registrant Organization:
Registrant Street: 2631 NE 53rd Street
Registrant City: Lighthouse Point
Registrant State/Province: Florida
Registrant Postal Code: 33064
Registrant Country: United States
Registrant Phone: +1.9546296083
Registrant Phone Ext:
Registrant Fax:
Registrant Fax Ext:
Registrant Email: rob.deignan@gmail.com
– advanced-techsupport.com (registration since lapsed) Historic whois shows this also registered to the T-rex address.
– advancedtechsupport.biz
Registry Registrant ID: CR150334991
Registrant Name: Robert Deignan
Registrant Organization:
Registrant Street: 2631 NE 53rd Street
Registrant City: Lighthouse Point
Registrant State/Province: Florida
Registrant Postal Code: 33064
Registrant Country: United States
Registrant Phone: +1.9546296083
Registrant Phone Ext:
Registrant Fax:
Registrant Fax Ext:
Registrant Email: rob.deignan@gmail.com
– superpcsupport.com (leaked by the DNS of one of the above domains) also registered at GoDaddy but information hidden by GoDaddy’s privacy service. The site looks pretty abandoned but lists their phone number as 855-544-6015 (+0018555446015 / 8555446015)
– fix99.com Another domain where Robert Deignan appears. The domain currently seems to forward to a news article about identity thieves.
Registrant Name: Robert Deignan
Registrant Organization:
Registrant Street: 2631 NE 53rd Street
Registrant City: Lighthouse Point
Registrant State/Province: Florida
Registrant Postal Code: 33064
Registrant Country: United States
Registrant Phone: +1.9546296083
Registrant Phone Ext:
Registrant Fax:
Registrant Fax Ext:
Registrant Email: rob.deignan@gmail.com
– inboundcallexperts.com
Registrant Name: ICE LLC.
Registrant Organization: ICE, LLC.
Registrant Street: 4800 T-Rex Avenue
Registrant Street: Suite 350
Registrant City: Boca Raton
Registrant State/Province: Florida
Registrant Postal Code: 33431
Registrant Country: United States
Registrant Phone: +1.5555555555
Registrant Phone Ext:
Registrant Fax:
Registrant Fax Ext:
Registrant Email: support@inboundcallexperts.com
– icecareers.com which lists yet another address of “700 Banyan Trail, Ste 200 Boca Raton, FL 33431”:
Registrant Name: Robert Deignan
Registrant Organization:
Registrant Street: 2631 NE 53rd Street
Registrant City: Lighthouse Point
Registrant State/Province: Florida
Registrant Postal Code: 33064
Registrant Country: United States
Registrant Phone: +1.9546296083
Registrant Phone Ext:
Registrant Fax:
Registrant Fax Ext:
Registrant Email: rob.deignan@gmail.com
– icelookup.com Website hosted on a cogent connection registered in Florida:
network:ID:NET4-267FD9201C
network:Network-Name:NET4-267FD9201C
network:IP-Network:38.127.217.32/28
network:Postal-Code:33160
network:City:Aventura
network:Street-Address:18071 Biscayne Blvd ste 1001
network:Org-Name:Value Added Solutions and Services / Vass-inc.com
network:Tech-Contact:ZC108-ARIN
network:Updated:2010-11-30 23:37:29Domain Whois:
Registrant Name: Robert Deignan
Registrant Street: 2631 NE 53rd Street
Registrant City: Lighthouse Point
Registrant State/Province: Florida
Registrant Postal Code: 33064
Registrant Country: United States
Registrant Phone: +1.9546296083
Registrant Phone Ext:
Registrant Fax:
Registrant Fax Ext:
Registrant Email: rob.deignan@gmail.com
– internetcomputerexperts.com
Registrant Name: Robert Deignan
Registrant Organization:
Registrant Street: 2631 NE 53rd Street
Registrant City: Lighthouse Point
Registrant State/Province: Florida
Registrant Postal Code: 33064
Registrant Country: United States
Registrant Phone: +1.9546296083
Registrant Phone Ext:
Registrant Fax:
Registrant Fax Ext:
Registrant Email: rob.deignan@gmail.com
– pcmri.com website showing the t-rex address, whois showing different:
Registrant Name: PC Vitalware
Registrant Organization: PC Vitalware, LLC
Registrant Street: 700 Banyan Trail
Registrant Street: Suite 200
Registrant City: Boca Raton
Registrant State/Province: Florida
Registrant Postal Code: 33431
Registrant Country: United States
Registrant Phone: +1.5555555555
Registrant Phone Ext:
Registrant Fax:
Registrant Fax Ext:
Registrant Email: support@pcvitalware.com
– atsdone2.com
Registrant Name: Robert Deignan
Registrant Street: 2631 NE 53rd Street
Registrant City: Lighthouse Point
Registrant State/Province: Florida
Registrant Postal Code: 33064
Registrant Country: United States
Registrant Phone: 954-629-6083
Registrant Phone Ext:
Registrant Fax:
Registrant Fax Ext:
Registrant Email: rob.deignan@gmail.com
– nativesonfishingcharters.com Not really sure how this links into the above companies but also registered under the same name.
Registrant Name: Robert Deignan
Registrant Organization:
Registrant Street: 2631 NE 53rd Street
Registrant City: Lighthouse Point
Registrant State/Province: Florida
Registrant Postal Code: 33064
Registrant Country: United States
Registrant Phone: +1.9546296083
Registrant Phone Ext:
Registrant Fax:
Registrant Fax Ext:
Registrant Email: rob.deignan@gmail.com
– sharpteethbigheart.com
Registrant Name: Robert Deignan
Registrant Organization:
Registrant Street: 2631 NE 53rd Street
Registrant City: Lighthouse Point
Registrant State/Province: Florida
Registrant Postal Code: 33064
Registrant Country: United States
Registrant Phone: +1.9546296083
Registrant Phone Ext:
Registrant Fax:
Registrant Fax Ext:
Registrant Email: rob.deignan@gmail.com
– ezbackupro.com
– easybackuppro.com
– ezbackuppro.com
– easybackupro.com
– sharkregistrycleaner.com
– icepublisher.com
– premium-techsupport.com
– atsdone1.com
– hiloshoes.com
– atshappy.com
– chatats.com
– conversiongroupconsulting.com
– sharkdriverupdater.com
– 2016antivirusreviews.com (this domain shows planning for the future / google spam or gaming)
– expert-techsupport.com
– sharksoftwaregroup.com
– sharkpcoptimizer.com
– sharkoptimizer.com
– 2014pcbackupreviews.com
– advanced-tech-support.com
– expert-tech-support.com
– remotetechservice.com
– nativesonfishing.com (Genuine website, of a friend?)
– experttechnicalsupport.com
– superpcsupport.net
– advancedtechsupport.biz
-fixme1.com
Registrant Name: Robert Deignan
Registrant Organization:
Registrant Street: 2631 NE 53rd Street
Registrant City: Lighthouse Point
Registrant State/Province: Florida
Registrant Postal Code: 33064
Registrant Country: United States
Registrant Phone: 954-629-6083
Registrant Phone Ext:
Registrant Fax:
Registrant Fax Ext:
Registrant Email: rob.deignan@gmail.com
thecomputerperson 