Popup - https://vb3.monster
A WhoIs lookup reveals the domain was registered via Porkbun on July 7, 2021 - Whois vb3.monster
Popup is a redirect link to a “free v-bucks” scam registered via NameCheap on June 12, 2021 - Whois xuro.live
Users are led to a fake Vbucks generator that requires “human verification” by subscribing to the following YouTube channel and sharing the scam on five separate videos - https://www.youtube.com/channel/UCsZoSZY7vPfC2xj32tP3NLQ/
Users are then sent to a fake survey page, requesting that users complete at least two of the following offers to receive “free vbucks” - https://www.locked1.com/cl.php?id=48ba68a0bc4661c28af1999fa853995f
A WhoIs lookup reveals the domain was registered via NameCheap on January 23, 2019 (updated January 14, 2021) - Whois locked1.com