https://quizwepo.co has been a long-time provider of popups (both Windows/Mac). Recently, it has stopped giving out popups, unfortunately. The popups were usually hosted on Windows.net and DO IP Addresses. They probably caught on to my tricks. The numbers they gave out are ususally reused, see if they still work here.
(833) 937-6224
(833) 606-2562
(833) 426-0763
(833) 571-1923
(877) 824-4447
(833) 471-1923
Give them a call and see if they work. Let me know!
2 Likes
I remember seeing this scammer group a year ago with google search ads but I couldn’t find them recently. How did you find this redirect?
They used to use fredconcept.com
I’m actually not sure, found quizwepo.co from some Scammer.info posts. Use this simple Google dork to find the same scam group: "WAIT! Click below to continue" - Google Suche
That google dork isn’t very effective, what I found works better is a reverse google analytics id search using this https://dnslytics.com/reverse-analytics search for UA-122845412-1
Those “quiz” sites don’t really give popups though. The “WAIT! Click below to continue” Google dork also helped me to find more other scams.
2 Likes
Those other quiz sites are from the exact same scammer group, if you look at the most recent one which is onequiz.co it links to a suspended page so it may have redirected to a popup at some point. The google dork shows other things and not just that one scammer group. The redirects might also only be active when the scammers are active
I agree that they are from the scammer group. The quiz sites are all related to “YourMindTest” or “My Constant Challenges.” They also all use the same site template. Hopefully we can find a new site for popups soon enough. These scammers were fun to torment.
1 Like
It was me who originally posted the quizwepo . co website. One of my clients some how got hit with it (how, I dont know), but I worked with quizwepo and their hosting company to get rid of the malicious ad redirects. Of course, another site will crop up doing the same thing, but this is why its stopped. For what its worth, they required video evidence of the scam taking place and were not friendly in taking down the ads.
2 Likes
I see. They stopped giving popups last week. Those quiz sites are always malicious.
1 Like
For reporting to google ads, I’ve noticed they are pretty responsive at least if you report to them a lot with evidence although you see the same scammers come right back the next day. Some hosting companies like digitalocean can be hesitant to take down the scams for some reason.
1 Like
Yep, very true on that assessment. DO and NameCheap both suck in dealing with take down requests. If that happens, the cases get escalated to an agency with a legal arm.
with namecheap, report on twitter and they take care of it much more quickly for some reason
To add on to what @terriblename said
https://twitter.com/1c4m3by/status/1581580074943676416/photo/1
https://twitter.com/drb_ra/status/1581430027173838848
https://twitter.com/MBThreatIntel/status/1580688598567120896/photo/1
Reporting via Twitter, they do actually deal with them. I presuming not on the website though but I could be wrong.
1 Like
I guess its time to create a twitter account – thanks folks