Another day and, unusually, another tech support scammer but one who called me!
Looking back at my call records it seems they had tried to call on Friday morning too but got through to my answerphone.
This is the first time they have called my number. Normally I have to call them from a fake virus warning page or a friend of mine is called and I have to use the number the friend was given.
The caller ID they called from was “0001632960451” (numbers beginning 000 don’t exist.. but let’s imagine they have broken and / or faked caller ID). At a later date they also called from “00666675”
The initial domain they went to for “ordering” the service I “needed” was:
The current whois information for the domain is associated with:
Registrant Name: Archit Gupta
Registrant Street: A-4/211 DDA JANTA FLATS
Registrant City: PASCHIM VIHAR
Registrant State/Province: Delhi
Registrant Postal Code: 110063
Registrant Country: IN
Registrant Phone: +91.9953444997
Registrant Email: email@example.com
Yet the website gives a US address and phone number of
276 Fifth Avenue, Suite 704
New York, NY 10001
The email address used is only associated with one other domain that doesn’t seem to be active.
The second part of the payment (the cart stuff) seems to run from zoomworld.ca which gives a logo called Geek Masters.
The zoomworld website code also leaks what appears to be previous name of “SG Technologies Inc.”
ESupportstation is the “merchant name” being used at the payment processor.
The server that their website is hosted on is “18.104.22.168” which has the reverse DNS of “server.studiosos.biz”. The website at www.studiosos.biz, which appears to be an invoice software company, is the same exact template and layout as the supportcare.net site.
studiosos give their address, on their website, as:
1800 Windridge Drive, Sandy Springs
Atlanta GA 30350
Yet their whois details, at the time of writing, give the same address as published on the scam support supportcare.net site:
Registrant ID: DI_47249721
Registrant Name: Studio SOS LLC
Registrant Organization: Studio SOS LLC
Registrant Address1: 276, 5th Avenue, Suite 704
Registrant City: New York
Registrant State/Province: New York
Registrant Postal Code: 10001
Registrant Country: United States
Registrant Phone Number: +1.8622466786
Registrant Email: firstname.lastname@example.org
The computer they connected to my test computer from seemed to be on the domain “vlinks”, possibly the name of an outsourcing call center?