So when I was busy downloading some files an adf.ly popunder appeared and redirected to (http://) aaav02.xyz, which houses a fake windows alert. It looks pretty shit lmao.
Here's the number:
+31 72 808 0592
Haven't tried calling them but it looks pretty recent.