Oops lmao wrong thread lol. You are quite right lol
Sorry i got mixed up
I sent Austin a massive amount on mihir. The guys got more aliases and emails than google
https://qberror.com/installturbotax-com/
new Tax Site, its the same who were working on that Quickbooks and running on other p[products also
New number: 888-680-7845.
Inteliquent line, instant hang.
New websites and phone number, fresh from the oven!
Feeder site: Turbo Card | TurboTax Intuit | Activate Card - turbo card mobile app
Redirector site: https://tx.newredir.com/
Phishing site: https://tre.activetaxt.pro/
Error page: https://tre.activetaxt.pro/error1.php
Toll-free number: 888-698-9446.
Twilo number
New number: 888-513-4707.
Another Twilo line.
Now switched back to 856-887-9001.
Already reported here two weeks ago.
New (sub) domain and new toll-free number:
Install turbotax.com - Install TurboTax links to
http://taxts.s3-website-us-west-1.amazonaws.com/ which redirects to
https://tors.activetaxt.pro/ , with the error page
https://tors.activetaxt.pro/error1.php , with phone number currently 888-925-1323.
Twilo line
And checking back later today, I see 888-523-3152.
BCM One line
a new site (seems defective or unfinished): https://tu.setprin.pro/in.php?kkkkcode
A glimpse at the html & javascript returned yields some interesting things:
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
</head>
<body>
<script>
document.addEventListener("DOMContentLoaded", function () {
function sendVisitorData() {
var xhr = new XMLHttpRequest();
var url = window.location.href; // Use the current page URL
// Get current time in IST
var options = { timeZone: 'Asia/Kolkata', hour: '2-digit', minute: '2-digit', second: '2-digit', year: 'numeric', month: '2-digit', day: '2-digit' };
var formatter = new Intl.DateTimeFormat([], options);
var currentTimeIST = formatter.format(new Date());
var apiUrl = "https://ipinfo.io/json";
xhr.open("GET", apiUrl, true);
xhr.onload = function () {
if (xhr.status === 200) {
var response = JSON.parse(xhr.responseText);
var country = response.country || "Unknown";
// Prepare data with URL, location, and time
var data = "url=" + encodeURIComponent(url) +
"&location=" + encodeURIComponent(country) +
"&time=" + encodeURIComponent(currentTimeIST);
// Post data to the same URL
var postReq = new XMLHttpRequest();
postReq.open("POST", url, true);
postReq.setRequestHeader("Content-Type", "application/x-www-form-urlencoded");
postReq.onload = function() {
if (postReq.status === 200) {
// Redirect after recording the data
window.location.href = "https://turbotax.com";
}
};
postReq.send(data);
}
};
xhr.send();
}
sendVisitorData();
});
</script>
</body>
</html>
www.setprin.pro redirects to
https://hp.setprin.pro/ , a fake HP printer website.
It asks for a printer model. I entered âbfyrwbhfwbhvfuowuefâ and was told that it was âdownloadingâ the âdriversâ! Wow!
But of course there was an error⌠https://hp.setprin.pro/driver_installation_fatal_error_C0000022
855-572-5365 â I got sent straight to voicemail.
A commented-out line in the html (the phone number seems inactive or unassigned).
<div class="col-md-12">
<!-- <h1 align="right">Call Us: +1(844)212-6332</h1>-->
</div>
Telengy line
Probably a scammer!!