PayPal logo

PayPal phishing & impersonation

Paymentspaypal.com
95
Impersonation sightings
30
Distinct hosts
2026-09-30
Last detected
2
Official domains

ScanMalware watches every scanned site for signs it is impersonating PayPal — the brand name in the page title or screenshot text, the brand's logo/favicon on a non-official host, and our AI analysis naming the brand. A match on a host outside PayPal's official domains is recorded below.

Official domains
paypal.compaypalobjects.com
Also known as
paypal.com

Sites impersonating PayPal

30 hosts · repeat scans of the same host are grouped

SiteVerdictsLast seenActions
culinarymedicinecollege-com.pages.dev
PayPal Betting Site Comparison 2026 GB — Expert Reviews
RulesLow RiskAIModerate Risk
2026-09-30
View scan →
goldesel.de
PayPal-Aktie: Unbestätigtes M&A-Gerücht kursiert – konkrete Details fehlen
RulesLow RiskAIHigh Risk
2026-09-28
View scan →
pay-pal-omega.vercel.app
Log in to your PayPal account
RulesMaliciousAIConfirmed Scam
2026-09-27
seen 9×
View scan →
loud-coffee-4d8r9iuu.edgeone.dev
PAYPAL
RulesHigh RiskAIConfirmed Scam
2026-09-25
seen 2×
View scan →
paypal3.vercel.app
PayPal Login
RulesMaliciousAIConfirmed Scam
IDS: PHISHING Fake login form detected
2026-09-24
seen 10×
View scan →
paypal-secure.vercel.app
Sign in to PayPal
RulesLow RiskAIModerate Risk
2026-09-23
seen 3×
View scan →
nexuspirfsch.edgeone.dev
Login Page - Step Form with Loader and OTP
RulesHigh RiskAIConfirmed Scam
Credential Phishing on disposable hosting
2026-09-21
View scan →
paypal-login.netlify.app
Log in to your PayPal account
RulesHigh RiskAIConfirmed Scam
IDS: ET PHISHING Possible Paypal Phishing Landing - Title over non SSL
2026-09-19
seen 2×
View scan →
dreamy-klepon-5fc65e.netlify.app
Log in to your PayPal account
RulesHigh RiskAIConfirmed Scam
2026-09-16
seen 2×
View scan →
codehub-amber.vercel.app
PayPal
RulesLow RiskAIModerate Risk
2026-09-05
seen 11×
View scan →
paywalletsecure.netlify.app
PayPal Login
RulesHigh RiskAIHigh Risk
Credential Phishing on disposable hosting
2026-09-05
seen 6×
View scan →
codelogs-henna.vercel.app
PayPal
RulesLow RiskAIModerate Risk
2026-09-03
seen 4×
View scan →
logcoder-fawn.vercel.app
PayPal
RulesLow RiskAIModerate Risk
2026-09-02
seen 4×
View scan →
cerainvoice.edgeone.dev
Login Page - Step Form with Loader and OTP
RulesHigh RiskAIConfirmed Scam
Credential Phishing on disposable hosting
2026-09-02
View scan →
coderlogs.vercel.app
PayPal
RulesLow RiskAIModerate Risk
2026-09-01
seen 2×
View scan →
getcoder.vercel.app
PayPal
RulesLow RiskAIModerate Risk
2026-08-30
View scan →
codhub-one.vercel.app
PayPal
RulesLow RiskAIModerate Risk
2026-08-30
seen 2×
View scan →
www-paylabs.vercel.app
PayPal Account | Mobile Wallet and More | PayPal IN
RulesHigh RiskAIHigh Risk
IDS: ET PHISHING Cloned Website Phishing Landing - Saved Website Comment Observed
2026-08-22
seen 2×
View scan →
delivery-pack.hopto.org
Order Summary - PayPal
RulesHigh RiskAIConfirmed Scam
2026-08-21
View scan →
errcode-blond.vercel.app
PayPal
RulesLow RiskAIModerate Risk
2026-08-21
seen 2×
View scan →
derschuetzenhof.de
Login
RulesMedium RiskAIHigh Risk
2026-08-17
View scan →
logs-inky-alpha.vercel.app
PayPal
RulesMedium RiskAIModerate Risk
2026-08-01
View scan →
coderr-ecru.vercel.app
PayPal
RulesHigh RiskAIModerate Risk
2026-07-31
seen 2×
View scan →
dist-tan-ten-93.vercel.app
Log in to your PayPal account
RulesMaliciousAIConfirmed Scam
2026-07-30
seen 6×
View scan →
logscode-opal.vercel.app
PayPal
RulesMaliciousAIHigh Risk
2026-07-26
View scan →
codelogr-two.vercel.app
PayPal
RulesLow RiskAIModerate Risk
2026-07-25
seen 2×
View scan →
dxcoder.vercel.app
PayPal
RulesMedium RiskAIModerate Risk
2026-07-17
seen 4×
View scan →
taxcoder.vercel.app
PayPal
RulesMaliciousAIHigh Risk
2026-07-17
seen 3×
View scan →
coderr-steel.vercel.app
PayPal
RulesMaliciousAIHigh Risk
2026-07-17
seen 3×
View scan →
coderhub-one.vercel.app
PayPal
RulesMaliciousAIHigh Risk
2026-07-16
seen 5×
View scan →

5 further hosts are not listed: the PayPal name appeared on them, but both our rule engine and our AI analysis rated the page harmless, so we do not publish them as impersonation.