This cluster centers on 3 connected domains identified through shared infrastructure and registration patterns. The domains include abby.needuu.com, aria.needuu.com, themetcloisters.com. This campaign was identified through automated analysis of threat intelligence feeds and entity relationship mapping.
Domain
themetcloisters.com
First seen May 6, 2026
Suspicious
- No SSL certificate
- WHOIS registration hidden
- 1 community report from users
Campaign Intelligence
Details
Related Domains
Community Reports
Met Shop copycat website (https://themetcloisters.com) I came across a website today that appears to be a duplicate of the Metropolitan Museum of Art store website. All Met products are on sale there, many of them at substantial discounts. I entered the site through Google Images and did not realize it was not the actual Met Shop site. I ordered two items. After filling out the shipping and credit card information, I was prompted to pay via PayPal, which I thought was strange given that I had entered my credit card info, but I went ahead and paid via PayPal. A popup PayPal notification on my phone said that a payment had been authorized to someone named Mpho Rasehloka—obviously not the Met. PayPal says I cannot cancel the authorization because it is still pending. I called my credit card company to cancel the card associated with my PayPal account so that this person cannot make further purchases. Is there anything more I can do?
53 days ago1 upvote
Share Your Experience
What's Your Exposure?
Know your risk exposure to this message with a Thorough Analysis. It returns a detailed report covering the complaint history, your data breach exposure, related scam entities, and risk signals tied to this email message. Check the box and enter your email address now.