The last part to the PayPal phishing link is not needed. Just this:
https://www.kumarurology.com/pr/sr/fr/
Taking a look at the backend, this is how it does it: 
Email belonging to the scammer: [email protected], found in the config files of the site. 
This chunk of code, seems they bought the site from the black market https://orvx.pw 
As much as I'd love to upload the code for others to analyse, the bad outweighs the good and I think it's best not to share a working Phishing scam for others to use. If you want to find it yourself (not hard) then please don't use it for bad or share it online. Thanks.
@Draco#184511 he cannot respond because he is suspended, but as @pbd#184512 said, it’s for scammer/spam accounts, in this case it was a skid annoying us who couldn’t tell scams and real stuff apart