Popup - zrmrfz.com/NIzy9v
Registered by Mike Lowrey in Stockholm, Sweden on June 24, 2023 - Whois zrmrfz.com
Associated Phone Number - +46 66128491
Associated Email Address - [email protected]
On desktop, the popup redirects to Google
On mobile, the popup redirects to American post Service (allindaywinners.com)
Registered via NameCheap on June 21, 2023 - Whois allindaywinners.com
Popup claims you won a new Samsung TV, prompting you to pay $2 in shipping by going to Samsung QLED 8K TV (bestgoalzlab.com)
Registered via Name.com on July 24, 2023 - Samsung QLED 8K TV (bestgoalzlab.com)
Here, users are asked to enter a sweepstakes for a Samsung Neo QLED 8K TV by paying $1.95 for a “gaming app” subscription that can only be cancelled by going to Support Hub, which is powered by Solvpath.
Registered via GoDaddy on October 26, 2022 (Updated July 23, 2023) - Whois supporthub.biz
Associated IP Address - 3.18.163.254 (also hosts We Teach… (onlinesupport.org))
Users may also be asked to pay through Dynamic (thrillingjackpotdeals.com)
Registered by Karen Andoy of Omni E Commerce in Enterprise, Alabama via NameCheap on May 18, 2023 - Whois thrillingjackpotdeals.com
There, users are asked to pay $7.84 and be enrolled in a 10-day trial for Dynamic, which will eventually become a monthly auto-ship program for $139.74/month if you don’t cancel.
Associated Phone Numbers:
(800) 123-4567 (Yes, that is really their number)
(619) 861-8596
Associated Physical Address - 105 Arapaho Ct, Enterprise, Alabama, 36330
I have also managed to trace their (800) number to an Indian call center by the name of Infinia Trading, which specializes in government and college grant, bank impersonation, debt elimination, medical and tech support scams. Companies impersonated by the scammers include Microsoft, AT&T, Telus, Chase Bank and the Federal Bureau of Investigation.
Another active money mule for this organization is Maverick Trading, a fraudulent trading platform requiring a $5,000 bond, $7,000 sign-up fee and a $200/month subscription in order for users to trade. While they list a Salt Lake City, Utah PO box for their mailing address, the money mule actually lives in 1910 E Fort Union Blvd, Salt Lake City, UT 84121
Both the Andoys and Maverick Trading were reported to the NY State Attorney General as part of Operation Stop Scam Calls.
