GrizzlyGrizzly
Recent phishing
Phishing

Impersonating PayPal

Intent: Personal information collection

  • Domain is not operated by PayPal
  • DNS nameservers do not match PayPal's known infrastructure
  • TLS certificate has no organization information
  • Mail servers do not match PayPal's known infrastructure
  • Domain not registered through PayPal's usual registrar
  • SPF record does not reference PayPal's infrastructure

PayPal Checkout payment form for E2 Tun-Service with card and billing address fields

Scanned 34 days ago · Aug 27, 2026, 14:08 UTC

Think this verdict is wrong?

Check a suspicious URL yourself — free to try.

Scan a URL
Phishing: paypal.obd2tun.com — Grizzly