I found this while surfing the internet, was a redirect link to a fake pop-up from a site that was compromised.
(NOTE: Hijacks your cursor using Javascript and demands a password login box.)
Popup:
Source Code:
I just called them on that Aussie number, then they called me back from US phone +1-888-727-1224. I have tried calling this US number but it doesn’t seem to answer right now, but appears to have recently been used by tech support scammers according to this link replace/d/8806-first-time-putting-one-on-here .
Brief Whois on hxxp://www.shopeeinfo37.club
Registrar WHOIS Server: whois.godaddy.com
Registrant Email: [email protected]
Registry Admin ID: CR334170074
Admin Name: Govind Kumar
Admin Street: I-19 Sec-9
Admin City: Noida
Admin State/Province: Uttar Pradesh
Admin Postal Code: 201301
Admin Country: IN
Admin Phone: +91.9990888111
Well since they use GoDaddy, you could possibly call them and tell someone there that a scam site has been set up and if you tell them the domain, chances are it’ll get taken down (I’ve done it before and I’ve seen someone on YouTube do it before)
hxxp://www.shopeeinfo37.club it’s got browser lock and it seems as though the scammers are blocking silent numbers most of the time now.
Just got off the phone to GoDaddy and they’re gonna end up doing some domain repo.
I know these scammers will be persistent and keep creating new domains, but one domain off the web is a good thing, right?
Well, Telstra (my ISP) has done something about it.
And before you ask, yes, that is Android x-86 on VirtualBox.