GrizzlyGrizzly
Recent phishing
Phishing

Impersonating PayPal

Intent: Credential collection

  • Domain is not operated by PayPal
  • Domain name closely resembles PayPal's real domain
  • DNS nameservers do not match PayPal's known infrastructure
  • Mail servers do not match PayPal's known infrastructure
  • Domain not registered through PayPal's usual registrar

PayPal secure login page with email and password fields

Scanned 14 days ago · Sep 16, 2026, 09:50 UTC

Think this verdict is wrong?

Check a suspicious URL yourself — free to try.

Scan a URL
Phishing: wcrpaypal.cyou — Grizzly