de-paypal-sec.com - phishunt.io

PayPal

https://de-paypal-sec.com Access site

Screenshot

Investigate

Domain de-paypal-sec.com1 CT host on apex

urlscan

page.domain

VirusTotal

Whois

See every phishunt record for this domain

IP 172.67.184.28

urlscan

page.ip

VirusTotal

ipinfo

Greynoise

URL https://de-paypal-sec.com

urlscan

Wayback

archive.today

Cert YE1

crt.sh

Censys

Google CT

Phishunt analysis Beta

23 low suspicionheuristic risk score · not a probability

Why?

+6.1 Google Safe Browsing
+5.3 Keyword match
+5.1 Site cluster
+2.0 ASN reputation
+1.1 No CSP header
+0.9 Young certificate
+0.8 Young domain
+0.7 Brand in cert SAN
+0.3 Free CA
+0.3 Long domain
+0.2 Hyphens
+0.2 Suspicious TLD

15 signals fired · detector v3.0.0

AI analysis AIBeta

Credential harvesting

Domain combining a German country prefix, PayPal and a security term to impersonate PayPal and likely harvest account credentials. Hosted behind Cloudflare, flagged by Google Safe Browsing for social engineering, shares infrastructure with other detected sites and has no links to the real PayPal.

Google Safe BrowsingSite clusterNo brand links

AI-generated from stored detector signals - the AI never visited the site. · 2026-10-04 · confidence 70%

Domain & Network

Whois

Registrar GoDaddy.com, LLC

Network

IP 172.67.184.28 Cloudflare CDN

Country