| Author |
Message |
Dr.Robotnik
Master Baiter

Joined: 21 Jun 2013
Posts: 143

|
Posted:
Sun Jul 21, 2013 11:49 pm |
  |
Edit Good news the website is now offline.
This not an advanced fee fraud website it is one of those websites where they trick customers into install team-viewer and they put viruses on the victim's computers after that they say the computer has virus and to fix it you must pay a large sum of money. They may also trick the victim into thinking that they are running an unlicensed copy of windows and trick them into paying a lot for a fake "license".
| Code: |
Domain Name: SOFTWARESUPPORT.US
Domain ID: D36997863-US
Sponsoring Registrar: PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM
Sponsoring Registrar IANA ID: 303
Registrar URL (registration services): www.publicdomainregistry.com
Domain Status: clientTransferProhibited
Registrant ID: DI_28122965
Registrant Name: Paul Harry Weber
Registrant Organization: Software Support
Registrant Address1: 112 Olive Court Apt B
Registrant Address2: Novato
Registrant Address3: California
Registrant City: Novato
Registrant State/Province: California
Registrant Postal Code: 94947
Registrant Country: United States
Registrant Country Code: US
Registrant Phone Number: +1.4153280494
Registrant Email: [email protected]
Registrant Application Purpose: P1
Registrant Nexus Category: C12
Administrative Contact ID: DI_28122965
Administrative Contact Name: Paul Harry Weber
Administrative Contact Organization: Software Support
Administrative Contact Address1: 112 Olive Court Apt B
Administrative Contact Address2: Novato
Administrative Contact Address3: California
Administrative Contact City: Novato
Administrative Contact State/Province: California
Administrative Contact Postal Code: 94947
Administrative Contact Country: United States
Administrative Contact Country Code: US
Administrative Contact Phone Number: +1.4153280494
Administrative Contact Email: [email protected]
Administrative Application Purpose: P1
Administrative Nexus Category: C12
Billing Contact ID: DI_28122965
Billing Contact Name: Paul Harry Weber
Billing Contact Organization: Software Support
Billing Contact Address1: 112 Olive Court Apt B
Billing Contact Address2: Novato
Billing Contact Address3: California
Billing Contact City: Novato
Billing Contact State/Province: California
Billing Contact Postal Code: 94947
Billing Contact Country: United States
Billing Contact Country Code: US
Billing Contact Phone Number: +1.4153280494
Billing Contact Email: [email protected]
Billing Application Purpose: P1
Billing Nexus Category: C12
Technical Contact ID: DI_28122965
Technical Contact Name: Paul Harry Weber
Technical Contact Organization: Software Support
Technical Contact Address1: 112 Olive Court Apt B
Technical Contact Address2: Novato
Technical Contact Address3: California
Technical Contact City: Novato
Technical Contact State/Province: California
Technical Contact Postal Code: 94947
Technical Contact Country: United States
Technical Contact Country Code: US
Technical Contact Phone Number: +1.4153280494
Technical Contact Email: [email protected]
Technical Application Purpose: P1
Technical Nexus Category: C12
Name Server: NS1.WINDOWSGATEWAY.COM
Name Server: NS2.WINDOWSGATEWAY.COM
Created by Registrar: PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM
Last Updated by Registrar: PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM
Domain Registration Date: Sat Aug 11 09:12:46 GMT 2012
Domain Expiration Date: Sat Aug 10 23:59:59 GMT 2013
Domain Last Updated Date: Thu Jun 06 00:37:14 GMT 2013
|
|
_________________
(x4)
Last edited by Dr.Robotnik on Wed Jul 31, 2013 8:30 pm; edited 1 time in total |
|
|
|
 |
El Capitan Borracho
Baiting Guru

Joined: 17 Jun 2012
Posts: 18365
Location: Back until the artwork begins again

|
Posted:
Mon Jul 22, 2013 1:21 am |
  |
Can be moved to 'misc' forum
If it's a scam, please report.
Sent report here:
[email protected] |
|
|
|
|
 |
Dr.Robotnik
Master Baiter

Joined: 21 Jun 2013
Posts: 143

|
Posted:
Mon Jul 22, 2013 1:36 am |
  |
Are you asking if it is really a scam. Indeed it is. I know someone who is not good with computers that had a very close call with these people. I also send an abuse report to the email you gave me. |
_________________
(x4) |
|
|
|
 |
El Capitan Borracho
Baiting Guru

Joined: 17 Jun 2012
Posts: 18365
Location: Back until the artwork begins again

|
Posted:
Mon Jul 22, 2013 1:48 am |
  |
They should take care of it in 24hrs or so
Can still be moved to 'misc' forum |
|
|
|
|
 |
Dr.Robotnik
Master Baiter

Joined: 21 Jun 2013
Posts: 143

|
Posted:
Wed Jul 24, 2013 5:19 pm |
  |
Bad news the site is still up did I send the abuse report wrong or something here is what I sent to the email address above
| Quote: |
I would like to point out that the website "softwaresupport.us" is actually a website that is used to lead people into calling a phone number once they call the number instead of getting help with there computer they get the worst experience possible. What they do is get the victim to install team view and they take control of there computer. Once on there computer they trick the people into either A: they have viruses on there computer that don't really exist or B: they have an unlicensed copy of windows even though it is really licensed. In both cases it usually results in the victim paying large sums of money and the scammers install malicious software on the victims computer.
|
|
_________________
(x4) |
|
|
|
 |
bill2
Baiting Guru

Joined: 10 Sep 2006
Posts: 5495
Location: Yeah who can tell me where I am?

|
Posted:
Wed Jul 24, 2013 8:14 pm |
  |
That is just your general idea, hear say, not enough to close it down.
They will if you can convince them with some facts, they are using false logo's for creditcards, Verisign or something like that or a victim can show them emails that come from that domain that hold clearly scam indications.
It's not easy, you're trying to kill their customer, if... then drop it again with the fake scammer bank/site killers crew, they're good and persistent.
Edit: interesting
http://www.onguardonline.gov/articles/0346-tech-support-scams
Edit2: the address doesn't exists
| Quote: |
| 112 Olive Court Apt B Novato |
and the postal code is wrong for that area on the registration info, a bit more like that besides that there is no internet info on Harry Paul Weber and you might convince them to have a better look
the phone is a cellphone number and nowhere listed online, strange for a company
Good luck
edit3: their listed address on the website is shared with a church. And with http://onlinegeeksolution.com/ who has the same kind of website at the same address but
| Quote: |
status:LOCKED
Note: This Domain Name is currently Locked.
This feature is provided to protect against fraudulent acquisition of the domain name, as in this status the domain name cannot be transferred or modified. |
So it has the same smell to it.
registrant is hidden.
keep snooping that info and all they then can do is close it when you're done |
_________________ I don't do bling, I just do lads  |
|
|
|
 |
Dr.Robotnik
Master Baiter

Joined: 21 Jun 2013
Posts: 143

|
Posted:
Wed Jul 24, 2013 10:41 pm |
  |
This topic was at FAKE SCAMMER BANKS & SITES but then it got moved I do not understand why it got moved when this is clearly a fake website used by scammers.
Also I sent them this email
| Quote: |
I previously sent an email to you regarding the website http://softwaresupport.us/ who is abusing your services. It appears as though you did not act on my email if this is because of lack of evidence I would like you to read http://www.onguardonline.gov/articles/0346-tech-support-scams and you will see that the website has many things mentioned on the article for example the websites claims they are with microsoft even though that is a huge lie. Also I would like to point out that when doing a whois lookup on the website we find that the zip code does not match the area and the address does not even exist in the state of California. Also the whois information reveals that the phone number is some random cell phone number which is strange for a company. You can use http://www.phonevalidator.com/ to check this for yourself. Also I called the number and found out that they it is just some random person who has nothing to do with softwaresupport.us
|
Also I "tested" the number with prankown.com and I feel a little embarrassed right now that phone number is just some random person. You can hear there reaction here http://www.prankowl.com/#reaction-1247709 for some reason you have to copy and paste the entire link I do not know why just clicking on the link does not work. |
_________________
(x4) |
|
|
|
 |
bill2
Baiting Guru

Joined: 10 Sep 2006
Posts: 5495
Location: Yeah who can tell me where I am?

|
Posted:
Wed Jul 24, 2013 10:59 pm |
  |
We need proof too that it is a scammer and not your ex-wife website as an example.
You are convinced it is, so find some proof that shows clearly that it is a scammer. To me it's starting to look that way, but the more proof you have the better.
As it is a different scam than what we normally close down it might be their idea to have it in this forum, MOD's are always right
As a practice you could sign up as a site killer and they learn you this stuff and give you the links to check the info on the site, really interesting to know and a kick in the gut to the scammer.
These sites cost money and you're throwing it away without him being able to stop it.
good luck |
_________________ I don't do bling, I just do lads  |
|
|
|
 |
Dr.Robotnik
Master Baiter

Joined: 21 Jun 2013
Posts: 143

|
Posted:
Wed Jul 24, 2013 11:05 pm |
  |
I know someone who is not very good with computers and they did the exact same thing that all the tech support scammers do such as install team viewer run event viewer. Luckily the person realized that it was a scam before getting the payment part of their script. They pretended they had to take a call. I ended up looking on there computer and found that several important files related to windows such as BOOT.INI were modified on the day that they had a near miss with the scammers. I ended up backing up there documents and photos etc and wiping the partition I then installed debian instead of windows which is more secure so they are now less likely to get into another issue like the one they had. I still think this should be moved back to the fake sites forum. |
_________________
(x4) |
|
|
|
 |
bill2
Baiting Guru

Joined: 10 Sep 2006
Posts: 5495
Location: Yeah who can tell me where I am?

|
Posted:
Thu Jul 25, 2013 12:02 am |
  |
I understand your problem and thinking, you were there, we weren't, it isn't a clear cut case so you will have to do some effort to find evidence of a scam or computer attack before any company is willing to shut those guys down, I gave you a few hints, you could go after the 1-800 numbers with Google and see if they were used recently for other scams, would be a good clue we're dealing with scammers. It's hard to say, if I already had the answer you would have it too
Takes some work and persistence to get it together, that's why I admire the fake bank gang that closes hundreds, if not thousands of sites every year. |
_________________ I don't do bling, I just do lads  |
|
|
|
 |
Dr.Robotnik
Master Baiter

Joined: 21 Jun 2013
Posts: 143

|
Posted:
Thu Jul 25, 2013 12:53 am |
  |
Look at this page here http://softwaresupport.us/kaspersky-support.html you can tell they recently changed numbers but this page still has the old one. Also notice that aspect ratio of the girl is wrong (the picture is warped). No legit company would make such a mistake. Once I find my microphone and set up a virtualbox I will call them myself and make a video. |
_________________
(x4) |
|
|
|
 |
|
|