Made some calls, they're linked to a geekshelp website (with a .me at the end). Some kind of proprietary remote desktop connection or something. Also installed a scanning tool to try and find out what the Donald Trump Antivirus was. Though it looked like it was trying to pull files from the VM. I hope they like the vore images I have scattered around just for them.
Domain look up shows the admin address is Kannur, a city on the coast of India.