im.nbpublic.com - phishunt.io

PayPal

https://im.nbpublic.com/loading_page/paypal/paypal_cf_12/index.html?lptoken=17d386f680f577074237&cep=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&cpid=6972d51e425cbf0012ed2529 Access site

Screenshot

Investigate

Domain im.nbpublic.com1 CT host on apex

urlscan

page.domain

VirusTotal

Whois

IP 104.21.42.33

urlscan

page.ip

VirusTotal

ipinfo

Greynoise

URL https://im.nbpublic.com/loading_page/paypal/paypal_cf_12/in…

urlscan

Wayback

archive.today

Cert -

crt.sh

Censys

Google CT

Phishunt analysis Beta

28 low suspicionheuristic risk score · not a probability

Keyword matchBrand impersonation in pathOpenPhish

14 signals fired · detector v2.0.0

AI analysis AIBeta

Credential harvesting

A PayPal phishing kit hosted on a Cloudflare-fronted subdomain of nbpublic.com. The URL path reveals a paypal_cf campaign folder with a session tracking token, consistent with a kit-based credential harvesting operation. Flagged by OpenPhish.

OpenPhishBrand impersonation in pathKeyword match

AI-generated from stored detector signals - the AI never visited the site. · 2026-08-16 · confidence 82%

Domain & Network

Whois

Registrar GoDaddy.com, LLC

Network

IP 104.21.42.33

Country