GrizzlyGrizzly
Recent phishing
Phishing

Impersonating PayPal

Intent: Persuasion

  • Domain is not operated by PayPal
  • DNS nameservers do not match PayPal's known infrastructure
  • TLS certificate has no organization information
  • Domain was registered very recently
  • Domain not registered through PayPal's usual registrar

Pay-Pal-branded refund portal instructing users to generate a cancellation ID on Windows or Mac

Scanned 20 days ago · Sep 9, 2026, 17:08 UTC

Think this verdict is wrong?

Check a suspicious URL yourself — free to try.

Scan a URL