SMS refund scam

Scams Refund Scam
1

Just received (on my work cell phone) SMS scam from (probably spoofed) 1-902-440-8283

"We made a miscalculation on your previous Invoice, take back (106.71) at hxxps://zh1dh3.me **[Warning! Hack link!]** Process can take 2days to appear.

I have not followed the link - received on a work phone owned by a hyper-vigilant security and image conscious company (literally - days worth of this is how you act and don't get scammed" videos to watch). I don't want to risk following the link. Not sure what it is - or how my employers will react if it's bad. It is typed exactly as received including punctuation and capitalization.

2

And it appears that some of the punctuation that shows on my sms screen changes between italics and regular text on here. :confused:

3

[[3,72],[3,9,15,72]]

4

I’ve opened it inside a virtual machine with a VPN connected and it seems to redirect to Pizzahut.co now. For a brief second it shows something like “R0GUE…” in the Title of the browser tab.

5

That link might be targeting a specific ISP and display a different page depending on what IP you got.

I got the same as NeeP... it's just a redirect to PIzza Hut.

![image 2020-01-22-07-42-13jpg.jpeg](https://tlscommunity.com/assets/2020-01-22/12:42:480-2020-01-22-07-42-13jpg.jpeg)

Maybe if you're on Rogers Cable broadband it will try something else.

6

@Angella#125924

Yeesh! I'm glad I didn't follow that!

I'm sorry. I didn't know that. :( I would have said something if I had. I do try to give you everything I know.

7

The phone I received it on is subscribed to Rogers - so it may be targetting Rogers ISP if that’s possible.