Newly registered suspicious domain: paypal1.shop

PayPal
https://paypal1.shop Access site
Screenshot
Screenshot of paypal1.shop
Investigate
Domain paypal1.shop2 CT hosts on apex
urlscan page.domain VirusTotal Whois
IP 216.120.131.66
urlscan page.ip VirusTotal ipinfo Greynoise
URL https://paypal1.shop
urlscan Wayback archive.today
Cert -
crt.sh Censys Google CT
Domain & Network
Whois
Network
IP 216.120.131.66
Country United StatesUnited States
Hosting Cloudflare London, LLC
ASN AS209242
TLS Cert -
External detection No external source flags this
CleanGoogle Safe Browsing · OpenPhish · PhishTank · TweetFeed · urlscan.io
Report this phishing
Brand owner PayPal
phishing@paypal.com Web form
Submit to blocklists
Google Safe Browsing Microsoft SmartScreen APWG PhishTank

Not phishing? Dispute this detection

Tracked from 2026-10-24 13:35 UTC  ·  Last refreshed 2026-10-24 13:35 UTC