"Update your Flash Player" SCAM - +357 25654002

[OfclyGoodenough]

Popup - Please Update (boot-upintenselyfreethefile.vip)

A WhoIs lookup reveals the domain was registered via NameCheap on July 13, 2021 - Whois boot-upintenselyfreethefile.vip

Associated Browser Extension - Private Mode Search - Microsoft Edge Addons

Associated Phone Number (CYPRUS) - +357 25654002

Associated Email Addresses:
[email protected]
[email protected]

Associated Physical Address - Karaiskaki 13, 3032 Limassol, Cyprus.

Private Mode Search is a subsidiary of Girema Holdings, Ltd.

[NeeP]

They’ve sent us a removal request, claiming they’re “just” the ad network pushing this fraudulent ad lol:
Moreover, the email address [email protected] does not exist or is full. We get an error message when replying to them.

Limassol is a known tax haven for Russians. You can actually buy citizenship in Cyprus and thus for the EU if you have enough money.