Hi there
Just want to check, I logged into PayPal today on my desktop for the first time in maybe a few weeks. It asked me to confirm via SMS message which wasn't unusual but was a bit unexpected. It had my correct phone number on the dialog and the SSL certificate for the domain was legit.
The text I received came from the same number I usually get them from for PayPal but this time was a "py.pl" domain link which I'd never seen before. A quick Google search gets mixed results on the validity of this domain. I followed the link anyway on my phone as the SSL certificate at the top was legit and the text arrived after confirming the prompt. It logged me in successfully on the desktop however on my phone it then redirected to a "app.adjust.net.in" domain which didn't seem legit, uBlock Origin blocked on my phone due to "mobile ads". This just doesn't seem like a wise UX for PayPal. I've removed my cards anyway.
