Cybersecurity Threat Campaign Report: labubuco.us and Associated Entities
A consumer fraud campaign has been identified centered on the domain labubuco.us, a website registered on August 8, 2025, through the registrar Key-Systems GmbH. The site presents itself as a retailer of Labubu collectible items, a popular toy product line, and has drawn multiple complaints from consumers who report purchasing items and never receiving them. The domain's recent registration date is a significant red flag, as fraudulent retail sites are frequently created shortly before being deployed in active scam campaigns targeting trending consumer products.
Community reports submitted against labubuco.us describe a pattern consistent with a fake retail operation. At least two consumers report completing purchases through PayPal, receiving receipts linked to an entity identified as R3EWaste of Washington with an associated email address, and then being unable to reach any legitimate customer service contact. Reporters note that the listed phone number is non-functional and that emails go unanswered. One consumer reported purchasing two Labubu items on December 16th and being unable to validate the transaction or obtain a response. A third community report, associated with the same cluster, describes a credit repair and tradeline scheme in which a consumer was promised a tradeline of up to 100,000 dollars and received neither the service nor any meaningful communication, with only an automated email acknowledgment returned.
The domain labubuco.us has been reported together with Credit Corp Solutions Inc., a debt collection company carrying 2,836 complaints filed with the Consumer Financial Protection Bureau. The relationship between the domain and Credit Corp Solutions Inc. is flagged at a confidence level of 0.50, indicating a co-reported association rather than confirmed shared infrastructure. It is possible that consumers encountering the labubuco.us operation subsequently experienced contact from debt collection entities, or that the credit repair scheme referenced in community reports serves as a bridge between the fake retail site and debt collection activity. The CFPB complaint volume against Credit Corp Solutions Inc. is substantial and independently signals an entity with a significant history of consumer disputes in the debt collection industry.
The geographic indicators in this cluster point to Washington state as one location connected to the payment processing side of the labubuco.us operation, based on the R3EWaste of Washington entity named in a PayPal receipt provided to at least one victim. The use of a third-party or misappropriated business identity in PayPal transactions is a common technique used by fraudulent retail sites to obscure the true destination of consumer payments and complicate chargeback attempts.
Consumers who encounter labubuco.us or similar newly registered retail domains should take the following precautions. Do not complete purchases on websites registered within the past few months, particularly those selling trending or high-demand collectibles. Verify a domain's registration date using publicly available WHOIS lookup tools such as lookup.icann.org. If you have already been contacted or made a payment, do not click any follow-up links sent by the operator, and do not provide additional personal or financial information. File a complaint with the Federal Trade Commission at reportfraud.ftc.gov and with the FBI's Internet Crime Complaint Center at ic3.gov. If payment was made through PayPal, file a dispute immediately through PayPal's Resolution Center. To check whether a phone number or domain has been flagged by other consumers, use resources such as the FTC's complaint database or community reporting platforms.
This cluster presents a moderate to high threat level. The labubuco.us domain is actively soliciting payments, has confirmed victims who received no goods or services, and is associated through community reporting with a high-complaint debt collection entity. Recommended next steps include flagging labubuco.us for domain-level review and potential suspension with Key-Systems GmbH, escalating consumer complaints to relevant state attorneys general in Washington, and monitoring for additional domains using the Labubu brand or the R3EWaste payment identity, as fraudulent retail operations of this type frequently replicate across multiple domains when one is shut down.