He stole a whole $250 AUD from me. Well played sir, I didn't pick this up as I was doing it on my mobile, if I was on my pc i would've been safe.

I reported the cash website link to go daddy so they removed that quite quickly the malicious js.