nice scam the script does this it will remove the btc address from the site and replace it with his bitcoin address, so you are just sending him money.
Fake CryptoRefills hack
Typically, in a social media chat group or shady forum, the attacker claims they have a way to exploit our system and receive free money/products or at a discount. To do so, they ask the user to install a browser extension or paste some code in their browser’s console. This results in the user getting an address replacer malware on their computer, which will replace CryptoRefills’ or any other crypto addresses you want to pay.
Please ban this guy