supportcare.net / Geek Masters / eSupportStation / vlinks tech support scam cold callers.

Another day and, unusually, another tech support scammer but one who called me!

Looking back at my call records it seems they had tried to call on Friday morning too but got through to my answerphone.

This is the first time they have called my number. Normally I have to call them from a fake virus warning page or a friend of mine is called and I have to use the number the friend was given.

The caller ID they called from was “0001632960451” (numbers beginning 000 don’t exist.. but let’s imagine they have broken and / or faked caller ID). At a later date they also called from “00666675”

The initial domain they went to for “ordering” the service I “needed” was:

http://www.supportcare.net/our-plans

The current whois information for the domain is associated with:

Registrant Name: Archit Gupta
Registrant Street: A-4/211 DDA JANTA FLATS
Registrant City: PASCHIM VIHAR
Registrant State/Province: Delhi
Registrant Postal Code: 110063
Registrant Country: IN
Registrant Phone: +91.9953444997
Registrant Email: architguptaa@gmail.com

Yet the website gives a US address and phone number of

276 Fifth Avenue, Suite 704
New York, NY 10001
Ph.: +1-877-848-3948
Email: support@supportcare.net

The email address used is only associated with one other domain that doesn’t seem to be active.

The second part of the payment (the cart stuff) seems to run from zoomworld.ca which gives a logo called Geek Masters.
The zoomworld website code also leaks what appears to be previous name of “SG Technologies Inc.”

ESupportstation is the “merchant name” being used at the payment processor.

The server that their website is hosted on is “45.79.143.121” which has the reverse DNS of “server.studiosos.biz”. The website at www.studiosos.biz, which appears to be an invoice software company, is the same exact template and layout as the supportcare.net site.

studiosos give their address, on their website, as:

1800 Windridge Drive, Sandy Springs
Atlanta GA 30350
Ph.: +1-404-382-0802

Yet their whois details, at the time of writing, give the same address as published on the scam support supportcare.net site:

Registrant ID: DI_47249721
Registrant Name: Studio SOS LLC
Registrant Organization: Studio SOS LLC
Registrant Address1: 276, 5th Avenue, Suite 704
Registrant City: New York
Registrant State/Province: New York
Registrant Postal Code: 10001
Registrant Country: United States
Registrant Phone Number: +1.8622466786
Registrant Email: mail@studiosos.biz

The computer they connected to my test computer from seemed to be on the domain “vlinks”, possibly the name of an outsourcing call center?

Advertisements
This entry was posted in Uncategorized. Bookmark the permalink.

Comment on this topic

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s