Popup - https://me2.do/FeeFxkh4?JrSVAB
Registered by Juan Enrique Sanchez of NameAction Inc./Naver Corporation/Gabia Inc. via Registrar NIC .DO on October 20, 2010 (Updated August 24, 2020) - Whois me2.do
Associated Phone Number - [email protected]
Popup redirects to Human Verification (umbrellacorporation.id)
Registered via Jagat Informasi Solusi (int) in Jakarta, Indonesia on February 19, 2021 (Updated February 20, 2022) - Whois umbrellacorporation.id
The phishing link is broken, though users will be asked to click “allow” to receive notifications.
NEW POPUP - https://me2.do/GnjpVtq4?ClSzbV
Associated Phone Number - [email protected]
Popup redirects to Human Verification (umbrellacorporation.me)
Registered via GoDaddy on August 5, 2022 - Whois umbrellacorporation.me
On mobile, the popup redirects to Reported Unsafe Site: Navigation Blocked (nxto.cloud)
Registered via GoDaddy on May 14, 2022 (Updated May 19, 2022) - Whois nxto.cloud
Requires users to provide their
- Login information
- Name
- Home Address
- Date of Birth
- ZIP Code
- Phone Number
- Credit Card Information
- SOCIAL SECURITY NUMBER
- Mother’s Maiden Name (optional)
supportpaypal693762772.com (23.202.231.169)
rDNS record for 23.202.231.169: a23-202-231-169.deploy.static.akamaitechnologies.com
I filed an abuse report with GoDaddy, for impersonating PayPal
they are taking remote with quickviewer
