GrizzlyGrizzly
Recent phishing
Phishing

Impersonating PayPal

Intent: Data collection

  • Domain is not operated by PayPal
  • DNS nameservers do not match PayPal's known infrastructure
  • TLS certificate has no organization information
  • Mail servers do not match PayPal's known infrastructure
  • Domain not registered through PayPal's usual registrar

PayPal verification code lookup form for entering up to 20 16-digit card numbers

Scanned via automated discoveryGrizzly continuously discovers newly created sites from public signals, such as certificate-transparency logs, and scans them as they appear. 35 days ago · Oct 7, 2026, 00:14 UTC

Think this verdict is wrong?

Check a suspicious URL yourself — free to try.

Scan a URL
Phishing: paypal.healtechk.com — Grizzly