Scam paypal email

i have recived an email from paypal scam

the image of the email:https://imgur.com/a/rrDBZYP
their email:hidden email

the link he gave me click at your own risk:http://www.kumarurology.com/pr/sr/fr/signin?country.x=NL&locale.x=en_NL

@Draco yes i got the red thing because i didnt follow the rules and asked all the staffs some questions that i must not ask

Interesting things at the root of the site.

The last part to the PayPal phishing link is not needed. Just this:
https://www.kumarurology.com/pr/sr/fr/

Taking a look at the backend, this is how it does it:
![image backpng.png](https://tlscommunity.com/assets/2021-03-22/10:46:460-backpng.png)

Email belonging to the scammer: [email protected], found in the config files of the site.
![image emailpng.png](https://tlscommunity.com/assets/2021-03-22/11:09:090-emailpng.png)

This chunk of code, seems they bought the site from the black market https://orvx.pw
![image orvpng.png](https://tlscommunity.com/assets/2021-03-22/11:07:540-orvpng.png)
As much as I'd love to upload the code for others to analyse, the bad outweighs the good and I think it's best not to share a working Phishing scam for others to use. If you want to find it yourself (not hard) then please don't use it for bad or share it online. Thanks.

More may come soon...

thanks for info

@Cyberlytical#183627 i found something

@scambuster1234#183630 what does your badge mean? ! With :arrow_up_small:… In red ?

@Draco#184511 means its a suspicious account or its given to scammers who post here

this specificly was given becuse they were driving the staff team insane

@Draco#184511 he cannot respond because he is suspended, but as @pbd#184512 said, it’s for scammer/spam accounts, in this case it was a skid annoying us who couldn’t tell scams and real stuff apart

@Zachinquarantine_#184515 oh I see :sweat_smile: