Security Scan: Log in to PayPal

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/078d5363-4d9d-4725-b00f-e31443a17b7d Domain and IP registration (RDAP)/api/v1/rdap/078d5363-4d9d-4725-b00f-e31443a17b7dHow often this domain was scanned/api/v1/domain/stats/dyecwp.com Scan history for this domain/api/v1/domain/history/dyecwp.com?limit=15

This website contacted 6 IPs in 4 countries across 5 domains to perform 20 HTTP transactions. The main domain is dyecwp.com and was registered 1 week ago.

Submitted URL: https://dyecwp.com/

Effective URL:

https://dyecwp.com/#/pages/landing/landing-airpods

Redirected

AI Security Verdict

High Risk

Confidence: 85%

Risk Score

PayPal-branded login and '$100 balance credit' lure hosted on a 2-day-old unrelated domain (dyecwp.com) — a textbook brand-impersonation phishing page. Do not enter credentials; report it.

Risk Factors (5)

Brand impersonation of PayPal on a non-official, mismatched domain

Title-domain mismatch: 'Log in to PayPal' vs. dyecwp.com

Two-day-old domain with no reputation

Financial incentive lure ($100 balance credit) to induce credential entry

Suspicious SPA landing route inconsistent with any PayPal property

Domain age information unavailable

Details

Page Title

Scan Type

public

Favicon Hash

MMH3: 500824144

MD5: f024b106dd8ff4116f44b5150d5586a6

Domain Name Analysis

Domain 'dyecwp.com' uses the commercial generic top-level domain (.com) and has no subdomain. The second-level label 'dyecwp' is 6 characters long with one vowel and 5 consonants. Splitting it apart reveals three words: dye, c, wp. Median word length is two characters. No strong language cues emerged from the frequency lists.

Screenshot

Personal Businessy —_ Developer PayPal Claim your $100 balance If your account has been used for purchases before, you are eligible fora $100 balance credit. Terms and conditions apply. Deutsch...

Page Load Overview

0.69s

Total Load Time

420 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:50%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:de

Text Length:270 chars

Detector Agreement:100%

Language mismatch: Declared as de but detected as en

Website Classification

Primary Category

adult content40% confidence

Type: static

Method: ml+structural

All Detected Categories

adult content

40%

e-commerce shopping

33%

technology software

30%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
5	80.96.109.92	Moldova	AS48753Ava Host Srl
3	157.240.0.6Facebook · CDN	Frankfurt am Main, Hesse, Germany	AS32934Facebook, Inc.
3	34.143.77.2Google · CDN	United States	AS396982Google LLC
3	157.240.0.35Facebook · CDN	Frankfurt am Main, Hesse, Germany	AS32934Facebook, Inc.
3	34.143.75.2Google · CDN	United States	AS396982Google LLC
3	124.174.83.118	China	AS137718Beijing Volcano Engine Technology Co., Ltd.
20	6	-	-