Tech Support Scams (w/ popups, tested & working numbers)

[drob.02]

Below are some tech support popups I’ve gotten today. All numbers have been tested and are working (except for one, explained in “Special notes” section of the popup in question).

Website Link: hxxps://dqk09p5moujp0.cloudfront.net/?utm_source=154
Phone Number: 1-855-206-1566

Website Link: hxxp://thiamine.stream/live/?a=AZ&pagex=0&s1=wrlgXUhD7Nar9cqgt-Koo3pozBzsDSY5E-GWZz0KsUfDV8shJQlNh0J8_2HRDyEtmaCzwxSscdxyh_jgwIjqXQ%2C%2C&os=Windows&browser=none&isp=none&ip=24.1.1.1&geo=US
Phone Number(s): 1-888-596-8260, 1-855-731-4578, likely more (see special notes)
Special Notes: This popup link will lead you to area-specific numbers. I set all the area-specific items in the popup link to "none", just copy and paste it as-is and it'll auto-fill all the area specific stuff. Use the number that you get, as it's more likely to be working (although the 2 above are fine right now and both answer very quickly).

Website Link: hxxp://moholefive.stream/page/?a=AZ&pagex=0&s1=qWPev7y2H1_S2choVn61hhbU0cmjOBZBkB5mCRy8N0c2qMdT2younhGJIyev8odcc62_djaFnAePJ_dbMoX8YA%2C%2C&os=Windows&browser=Internet%20Explorer&isp=none&ip=24.1.1.1&geo=US
Phone Number: N/A from me (see special noes)
Special Notes: This is like the popup above with the area-specific content, so do the same with this one as I said above. Unfortunately, my area-specific popup lead me to a (possibly scam but I'm not sure, so I'm playing it safe and blurring it) number that leads to Blue Cross Blue Shield health insurance, which is why I cannot include a number. I decided to include this anyway, so that maybe the number you all get leads to an actual tech support scam.

As always, good luck and happy scambaiting!

[GreedyChip]

is it just me or are these numbers all busy ?

[drob.02]

@GreedyChip#39729 Not sure. I just called and checked about 10min before these were posted and they were good then. The first one took a minute or so, but the others answered relatively quickly. Likely there’s lots from this forum calling right now since this was a recent post.

[GreedyChip]

@david-r-1002#39730 New here, i got a VM setup with a fake cmd and a rouge anti virus. i want to kill explorer.exe before the scammer connects just to see what he/she says.

[drek]

@GreedyChip#39734 Fake CMD?

[GreedyChip]

@drek#39739 Tech Support Scammer Fake Command Prompt download | SourceForge.net

[drob.02]

@GreedyChip#39734 You can do that but that’ll immediately tip them off that you’re a scambaiter. A lot of scambaiters say that the popup is gone, they restarted their compter, etc because all they’ve got is a screenshot and number or just a number, so because of many scambaiters telling them this, the majority of scammers now think that if you don’t have the popup, then you’re a scambaiter. So just use task manager if you really want to close it, but I’d recommend just leaving the popup open so you don’t tip them off as easily.

[drek]

@david-r-1002#39745 Good advice!

[KawaiiGothScamBait]

I just now had a scammer who told me I needed to pay $50 to get the key for him to connect to my PC…

[FloridianGD]

What are some good websites to find these guys? Like youtibe, but a different one. Kinda running dry here

[Gohan]

@FloridianGD#39778 Right?

[drob.02]

@FloridianGD#39778 I use gmil . com