PayPal logo

PayPal phishing & impersonation

Paymentspaypal.com
98
Impersonation sightings
32
Distinct hosts
2026-10-09
Last detected
2
Official domains

ScanMalware watches every scanned site for signs it is impersonating PayPal — the brand name in the page title or screenshot text, the brand's logo/favicon on a non-official host, and our AI analysis naming the brand. A match on a host outside PayPal's official domains is recorded below.

Official domains
paypal.compaypalobjects.com
Also known as
paypal.com

Sites impersonating PayPal

32 hosts · repeat scans of the same host are grouped

SiteVerdictsLast seenActions
pay-pal.netlify.app
Log in to your PayPal account
RulesMaliciousAIConfirmed Scam
2026-10-09
View scan →
horyzonix.paypal-login.antimoney-laundering.org
RulesMaliciousAIHigh Risk
2026-10-07
View scan →
pay-pal-omega.vercel.app
Log in to your PayPal account
RulesMaliciousAIConfirmed Scam
2026-10-04
seen 10×
View scan →
startpage.vg
RulesHigh RiskAIHigh Risk
2026-10-01
View scan →
support-paypal.help
502 Bad Gateway
RulesLow RiskAIHigh Risk
2026-10-01
View scan →
loud-coffee-4d8r9iuu.edgeone.dev
PAYPAL
RulesHigh RiskAIConfirmed Scam
2026-09-25
seen 2×
View scan →
paypal3.vercel.app
PayPal Login
RulesMaliciousAIConfirmed Scam
IDS: PHISHING Fake login form detected
2026-09-24
seen 10×
View scan →
paypal-secure.vercel.app
Sign in to PayPal
RulesLow RiskAIModerate Risk
2026-09-23
seen 3×
View scan →
nexuspirfsch.edgeone.dev
Login Page - Step Form with Loader and OTP
RulesHigh RiskAIConfirmed Scam
Credential Phishing on disposable hosting
2026-09-21
View scan →
paypal-login.netlify.app
Log in to your PayPal account
RulesHigh RiskAIConfirmed Scam
IDS: ET PHISHING Possible Paypal Phishing Landing - Title over non SSL
2026-09-19
seen 2×
View scan →
dreamy-klepon-5fc65e.netlify.app
Log in to your PayPal account
RulesHigh RiskAIConfirmed Scam
2026-09-16
seen 2×
View scan →
codehub-amber.vercel.app
PayPal
RulesLow RiskAIModerate Risk
2026-09-05
seen 11×
View scan →
paywalletsecure.netlify.app
PayPal Login
RulesHigh RiskAIHigh Risk
Credential Phishing on disposable hosting
2026-09-05
seen 6×
View scan →
codelogs-henna.vercel.app
PayPal
RulesLow RiskAIModerate Risk
2026-09-03
seen 4×
View scan →
logcoder-fawn.vercel.app
PayPal
RulesLow RiskAIModerate Risk
2026-09-02
seen 4×
View scan →
cerainvoice.edgeone.dev
Login Page - Step Form with Loader and OTP
RulesHigh RiskAIConfirmed Scam
Credential Phishing on disposable hosting
2026-09-02
View scan →
coderlogs.vercel.app
PayPal
RulesLow RiskAIModerate Risk
2026-09-01
seen 2×
View scan →
getcoder.vercel.app
PayPal
RulesLow RiskAIModerate Risk
2026-08-30
View scan →
codhub-one.vercel.app
PayPal
RulesLow RiskAIModerate Risk
2026-08-30
seen 2×
View scan →
www-paylabs.vercel.app
PayPal Account | Mobile Wallet and More | PayPal IN
RulesHigh RiskAIHigh Risk
IDS: ET PHISHING Cloned Website Phishing Landing - Saved Website Comment Observed
2026-08-22
seen 2×
View scan →
delivery-pack.hopto.org
Order Summary - PayPal
RulesHigh RiskAIConfirmed Scam
2026-08-21
View scan →
errcode-blond.vercel.app
PayPal
RulesLow RiskAIModerate Risk
2026-08-21
seen 2×
View scan →
derschuetzenhof.de
Login
RulesMedium RiskAIHigh Risk
2026-08-17
View scan →
logs-inky-alpha.vercel.app
PayPal
RulesMedium RiskAIModerate Risk
2026-08-01
View scan →
coderr-ecru.vercel.app
PayPal
RulesHigh RiskAIModerate Risk
2026-07-31
seen 2×
View scan →
dist-tan-ten-93.vercel.app
Log in to your PayPal account
RulesMaliciousAIConfirmed Scam
2026-07-30
seen 6×
View scan →
logscode-opal.vercel.app
PayPal
RulesMaliciousAIHigh Risk
2026-07-26
View scan →
codelogr-two.vercel.app
PayPal
RulesLow RiskAIModerate Risk
2026-07-25
seen 2×
View scan →
dxcoder.vercel.app
PayPal
RulesMedium RiskAIModerate Risk
2026-07-17
seen 4×
View scan →
taxcoder.vercel.app
PayPal
RulesMaliciousAIHigh Risk
2026-07-17
seen 3×
View scan →
coderr-steel.vercel.app
PayPal
RulesMaliciousAIHigh Risk
2026-07-17
seen 3×
View scan →
coderhub-one.vercel.app
PayPal
RulesMaliciousAIHigh Risk
2026-07-16
seen 5×
View scan →

8 further hosts are not listed: the PayPal name appeared on them, but both our rule engine and our AI analysis rated the page harmless, so we do not publish them as impersonation.