Paypal scammers

Popup - https://me2.do/FeeFxkh4?JrSVAB

Registered by Juan Enrique Sanchez of NameAction Inc./Naver Corporation/Gabia Inc. via Registrar NIC .DO on October 20, 2010 (Updated August 24, 2020) - Whois me2.do

image

Associated Phone Number - [email protected]

Popup redirects to Human Verification (umbrellacorporation.id)

Registered via Jagat Informasi Solusi (int) in Jakarta, Indonesia on February 19, 2021 (Updated February 20, 2022) - Whois umbrellacorporation.id

The phishing link is broken, though users will be asked to click “allow” to receive notifications.

NEW POPUP - Human Verification

Associated Phone Number - [email protected]

Popup redirects to Human Verification (umbrellacorporation.me)

Registered via GoDaddy on August 5, 2022 - Whois umbrellacorporation.me

On mobile, the popup redirects to Reported Unsafe Site: Navigation Blocked (nxto.cloud)

Registered via GoDaddy on May 14, 2022 (Updated May 19, 2022) - Whois nxto.cloud

Requires users to provide their

  • Login information
  • Name
  • Home Address
  • Date of Birth
  • ZIP Code
  • Phone Number
  • Credit Card Information
  • SOCIAL SECURITY NUMBER
  • Mother’s Maiden Name (optional)

supportpaypal693762772.com (23.202.231.169)
rDNS record for 23.202.231.169: a23-202-231-169.deploy.static.akamaitechnologies.com

I filed an abuse report with GoDaddy, for impersonating PayPal

they are taking remote with quickviewer