Tech Support Popups - 12/10/18

[reportingscammers007]

Some more tech support popups from typo squatting

http://www.ekbaarchalado.com/chx/
http://ocotillo.pw/

8667502045
8447943999


[drwat]

Crook Indian scammers: ekbaarchalado.com 844-794-3999

[Hindi ekbaarchalado means, play this trick once]

Their script:
<script type="text/javascript">
var isChromium = window.chrome,
vendorName = window.navigator.vendor,
isOpera = window.navigator.userAgent.indexOf("OPR") > -1,
isIEedge = window.navigator.userAgent.indexOf("Edge") > -1;
if(isChromium !== null && isChromium !== undefined && vendorName === "Google Inc." && isOpera == false && isIEedge == false) {
// is Google chrome
window.location.href = "./chx/";
}
if(navigator.userAgent.indexOf("Firefox") != -1 )
{
window.location.href = "./firiedgex/";
}
if(window.navigator.userAgent.indexOf("Edge") != -1 )
{
window.location.href = "./firiedgex/";
}
if(window.navigator.userAgent.indexOf("Mac") != -1 )
{
window.location.href = "./macx/";
}
if(window.navigator.userAgent.indexOf("iPhone") != -1 )
{
window.location.href = "./iOSx/";
}

if((navigator.userAgent.indexOf(“MSIE”) != -1 ) || (!!document.documentMode == true )) //IF IE > 10
{
window.location.href = “./firiedgex/”;
}
$SAFARI_URL = “apple”;

</script>

[reportingscammers007]

Looks like the 844-794-3999 number is dead.

[scammerscammer]

Weird, I visited the site above and my pc just started to lag and froze eventually. I’m using Linux.