Recent phishing
Phishing
- Domain is not operated by PayPal
- DNS nameservers do not match PayPal's known infrastructure
- TLS certificate has no organization information
- Domain not registered through PayPal's usual registrar
- SPF record does not reference PayPal's infrastructure
PayPal-branded refund request page urging users to click for a direct refund
Scanned 50 days ago · Aug 11, 2026, 03:59 UTC
Think this verdict is wrong?
Check a suspicious URL yourself — free to try.
Scan a URL