http://167.71.113.130/systemerror-win-chx/?phone=+1-(888)-402-0559&
1(888)-402-0559
Pretty annoying popup for a tech support scam. Beware, the website puts the tab in fullscreen and hides your cursor. It then attempts to download several .html files to scare the user, but it seems to be automatically blocked by Chrome. There is also an annoying siren to really get the blood pumping! There may be some other pop ups associated with the web page, but I have popups from the site blocked.
The site itself resembles that of Microsoft's webpage to further lure in unsuspecting net users. On top is an overlay resembling that of Windows Smartscreen, which of course is fake.
@SpoiledAngel#104204 I went to popup site you specified. It seems the phone number is VERY weirdly formatted on the popup. I’m not sure how you read that number and got what you posted. When I called the number, it was unreachable. That is why I have hidden this post. Thanks for understanding!
@Lynx#104206 The phone number is correctly formatted and listed in the URL, I just called it and it’s currently working.
@Norm_Harrison#104208 Alright, cool. Idk why I wasn’t able to reach it earlier.
Their payment gateway is www.paymentonweb.com and the code they used was 3815740594. I managed to waste 50 mins of their precious time. I hope that helps to stop these scammers from taking money from victims.
(888) 402-0559
It happened again: a typical Indian tech support scammer who has no clue whatsoever on how to fix REAL computer problems. That fake popup was intentionally let to run on chromium browser installed on my Scientific Linux 6.9 64-bit laptop. This good-for-nothing never asked me what OS I was using to begin nor did any of his troubleshooting suggestions work; therefore, that indian guy earned his well-deserved insults in Hindi .
Tried to call again (888) 402-0559 using another number and apparently rejects any call now…“Ben Chode” got scambaited, yeah!
To connect to my VM, they instructed me to go to www.go2patch.com (which the “IE version” goes to supportmart.nexus.support.com/consumer/connect/) and they used the code 450587
For payment, they used the code 3815740594 on the website www.paymentonweb.com/ and it goes to www.phonehelp247.com/checkout. Doing this would remove the wiruses.
I've reported this to Microsoft and I recommend you do the same.
I hope this helps to shut down their operation.
@That_Annoying_Guy_64#104221 Did you report their code to the remote software provider?
@Lynx#104223, As far as I know, there isn’t a report for go2patch unfortunately.
@That_Annoying_Guy_64#104227 Oof, that sucks.