i dont know for some reasons after usa and canada , germany is the country where people are doing tech support in large numbers!! maybe a german would pay more? i got this popup right now http://suerteomuerte.ga/secure
these guys use cloaking technology to hide aggressive ads from the top bots
a cloaking link looks like this http://l.cranberry-salad-6000.com/1a3a991c-9e89-4b98-94ac-86f5fab12c25
if the cloaker is on the tech support popup shows up it is not turned on then the pop up doesnt show up
This is so far I know:
suerteomuerte.ga
xvideoss.site
0800-182-2995
IP 66.198.240.39
Other malicious sites on this IP: www.micr0s0ft.ga
0800-000-0487 www.ringmeup.ga
+44 808 189 4459 www.msonlinesupport.online/uk
@Markiemm#32203 i know but at german time it will be turned on which will redirect to the german popup