Fake MS security alert pop-up: 1-855-611-5915

2019/02/27: 1-855-611-5915 windows pop-up with annoying beep.

1-855-611-5915

nickkkiiijiiipussyyyyy.oss-us-east-1.aliyuncs.com

1-855-611-5915 Windows pop-up security alert from website:

![image ms-popuppng.png](upload://6VUxkdecLX0qe4chbvOMiZAnaJk.png)![image ms-popuppng.png](upload://6VUxkdecLX0qe4chbvOMiZAnaJk.png)

Address lookup
canonical name nickkkiiijiiipussyyyyy.oss-us-east-1.aliyuncs.com.
aliases
addresses 47.252.95.89
Domain Whois record
Queried whois.internic.net with "dom aliyuncs.com"...

Domain Name: ALIYUNCS.COM
Registry Domain ID: 1710447560_DOMAIN_COM-VRSN
Registrar WHOIS Server: grs-whois.hichina.com
Registrar URL: http://www.net.cn
Updated Date: 2018-09-16T16:54:31Z
Creation Date: 2012-04-01T07:23:40Z
Registry Expiry Date: 2021-04-01T07:23:40Z
Registrar: Alibaba Cloud Computing (Beijing) Co., Ltd.
Registrar IANA ID: 420
Registrar Abuse Contact Email: [email protected]
Registrar Abuse Contact Phone: +86.95187
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Name Server: NS3.ALIYUN.COM
Name Server: NS4.ALIYUN.COM
Name Server: NS5.ALIYUN.COM
DNSSEC: unsigned
URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/

>>>

Last update of whois database: 2019-02-27T22:02:22Z <<<
Queried grs-whois.hichina.com with "aliyuncs.com"...

Domain Name: aliyuncs.com
Registry Domain ID: 1710447560_DOMAIN_COM-VRSN
Registrar WHOIS Server: grs-whois.hichina.com
Registrar URL: http://whois.aliyun.com
Updated Date: 2018-09-16T16:54:31Z
Creation Date: 2012-04-01T07:23:40Z
Registrar Registration Expiration Date: 2021-04-01T07:23:40Z
Registrar: Alibaba Cloud Computing (Beijing) Co., Ltd.
Registrar IANA ID: 420
Reseller:
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Registrant City:
Registrant State/Province: zhe jiang
Registry Registrant ID: Not Available From Registry
Name Server: NS3.ALIYUN.COM
Name Server: NS4.ALIYUN.COM
Name Server: NS5.ALIYUN.COM
DNSSEC: unsigned
Registrar Abuse Contact Email: [email protected]
Registrar Abuse Contact Phone: +86.95187
URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/

>>>

Last update of WHOIS database: 2019-02-25T05:13:17Z <<<
Network Whois record
Queried whois.arin.net with "n ! NET-47-252-0-0-1"...

NetRange: 47.252.0.0 - 47.252.127.255
CIDR: 47.252.0.0/17
NetName: ALICLOUD-US
NetHandle: NET-47-252-0-0-1
Parent: AL-3 (NET-47-250-0-0-1)
NetType: Reassigned
OriginAS: AS45102
Customer: ALICLOUD-US (C06961510)
RegDate: 2018-04-20
Updated: 2018-04-20
Comment: 1.For AliCloud IPR Infringement and Abuse Claim, please use below link with browser to report: https://intl.aliyun.com/report
Comment:

Comment: 2.For Alibaba.com and Aliexpress.com's IPR Infringement , please use below link with browser to report: https://ipp.alibabagroup.com
Comment:

Comment: 3.For Alibaba.com and Aliexpress.com's Abuse, please send email to those two mail lists to report: [email protected] and [email protected]
Comment:

Comment: 4. For network issue, please send email to this mail list: [email protected]
Ref: https://rdap.arin.net/registry/ip/47.252.0.0

CustName: ALICLOUD-US
Address: 400 S El Camino Real, Suite 400
City: San Mateo
StateProv: CA
PostalCode: 94402
Country: US
RegDate: 2018-04-20
Updated: 2018-04-20
Ref: https://rdap.arin.net/registry/entity/C06961510

OrgNOCHandle: ALIBA-ARIN
OrgNOCName: Alibaba NOC
OrgNOCPhone: +1-408-748-1200
OrgNOCEmail: [email protected]
OrgNOCRef: https://rdap.arin.net/registry/entity/ALIBA-ARIN

OrgTechHandle: ALIBA-ARIN
OrgTechName: Alibaba NOC
OrgTechPhone: +1-408-748-1200
OrgTechEmail: [email protected]
OrgTechRef: https://rdap.arin.net/registry/entity/ALIBA-ARIN

OrgAbuseHandle: NETWO4028-ARIN
OrgAbuseName: Network Abuse
OrgAbusePhone: +1-408-785-5580
OrgAbuseEmail: [email protected]
OrgAbuseRef: https://rdap.arin.net/registry/entity/NETWO4028-ARIN
DNS records
DNS query for nickkkiiijiiipussyyyyy.oss-us-east-1.aliyuncs.com failed: ConnectionReset

DNS query for 89.95.252.47.in-addr.arpa returned an error from the server: NameError

name class type data time to live
nickkkiiijiiipussyyyyy.oss-us-east-1.aliyuncs.com IN A 47.252.95.89 60s (00:01:00)
aliyuncs.com IN A 140.205.32.8 300s (00:05:00)
aliyuncs.com IN NS ns5.aliyun.com 172800s (2.00:00:00)
aliyuncs.com IN NS ns4.aliyun.com 172800s (2.00:00:00)
aliyuncs.com IN NS ns3.aliyun.com 172800s (2.00:00:00)
aliyuncs.com IN TXT google-site-verification=QEiBisBYDx1FWcEAs8cZyz9B5YZgqUg5tjfcm8IOkLY 300s (00:05:00)
Traceroute
Tracing route to nickkkiiijiiipussyyyyy.oss-us-east-1.aliyuncs.com [47.252.95.89]...

hop rtt rtt rtt ip address fully qualified domain name
1 0 0 0 208.101.16.73 outbound.hexillion.com
2 0 0 0 66.228.118.157 ae11.dar02.sr01.dal01.networklayer.com
3 1 * 1 169.53.16.183 b7.10.35a9.ip4.static.sl-reverse.com
4 18 18 18 50.97.17.163 ae0.cbs01.tl01.atl01.networklayer.com
5 30 *
29 50.97.17.164 ae0.cbs01.eq01.wdc02.networklayer.com
6 29 29 29 50.97.17.145 ae29.bbr01.eq01.wdc02.networklayer.com
7 29 29 29 206.126.237.184 eqix-dc5.alibaba.com
8 30 38 37 116.251.81.237
9 * * *
10 *
* *
11 28 28 28 47.252.95.89
Trace complete

The toll-free number on the popup is serviced by Twilio, Inc. This is a cloud telecommunications service provider based in San Francisco, CA.