Phishing detection: paypalhit.com

PayPal
http://paypalhit.com Access site
Screenshot
Screenshot of paypalhit.com
Investigate
Domain paypalhit.com1 CT host on apex
urlscan page.domain VirusTotal Whois
IP 178.16.54.200
urlscan page.ip VirusTotal ipinfo Greynoise
URL http://paypalhit.com
urlscan Wayback archive.today
Cert -
crt.sh Censys Google CT
Phishunt analysis Beta
23 low suspicionheuristic risk score · not a probability
Keyword matchBrand in domain labelTweetFeed
16 signals fired · detector v2.0.0
AI analysis AIBeta
Credential harvesting

PayPal impersonation site hosted in the Netherlands on a registrar-minimal domain, displaying PayPal branding in screenshots. Flagged by TweetFeed threat intelligence, likely harvesting payment account credentials.

Brand in domain labelTweetFeedNo registrar lock
AI-generated from stored detector signals - the AI never visited the site. · 2026-07-23 · confidence 76%
Domain & Network
Whois
Registrar OwnRegistrar, Inc.
Network
IP 178.16.54.200
Country The NetherlandsThe Netherlands
Hosting Omegatech LTD
ASN AS202412
TLS Cert -
External detection TweetFeed
CleanGoogle Safe Browsing · OpenPhish · PhishTank · urlscan.io
Report this phishing
Brand owner PayPal
phishing@paypal.com Web form
Submit to blocklists
Google Safe Browsing Microsoft SmartScreen APWG PhishTank
Not phishing? Dispute this detection

Tracked from 2026-07-23 12:01 UTC  ·  Last refreshed 2026-07-29 01:30 UTC