www.paypal.com
Classification: Whitelisted
www.paypal.com is a whitelisted (trusted) hostname. Reported by 6 threat sources, last seen 2026-08-18.
Current activity
- Online — resolving/reachable. Last checked 2026-08-18 13:32:11.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Matched whitelist source: Misp_bank_domain | Maltiverse | 2026-08-18 13:32:12 | 2026-08-18 13:32:12 | benign | |
| Top Popularity Site | Cisco Umbrella | 2022-07-18 20:32:35 | 2025-05-24 01:41:28 | benign | |
| Malicious URL | Hybrid-Analysis | 2023-07-27 13:00:04 | 2023-09-12 08:45:04 | ||
| Phishing | Antiphishing.com.ar | 2023-07-17 13:00:39 | 2023-07-17 13:00:39 | malicious-activity | T1566 Phishing |
| Safe Site | Cisco Umbrella | 2022-07-14 23:26:38 | 2022-07-16 01:16:55 | benign | |
| Malicious site | Hybrid-Analysis | 2018-08-02 03:15:50 | 2022-01-18 18:15:37 | ||
| Malware | Hybrid-Analysis | 2021-06-03 05:15:13 | 2022-01-18 08:30:51 | ||
| Phishing site | Hybrid-Analysis | 2018-06-06 18:45:47 | 2022-01-14 17:15:26 | ||
| Malware site | Hybrid-Analysis | 2018-07-30 18:01:01 | 2022-01-12 21:45:24 | ||
| Malware.Generic | Hybrid-Analysis | 2020-04-20 10:45:14 | 2021-09-03 16:00:53 | ||
| Generic.Malware | Hybrid-Analysis | 2018-04-18 18:17:27 | 2021-04-30 09:30:41 | ||
| PayPal.CX | Hybrid-Analysis | 2021-02-09 20:45:27 | 2021-02-09 20:45:27 | ||
| Gen:Variant.Zusy | Hybrid-Analysis | 2021-01-28 21:45:13 | 2021-01-28 21:45:13 | ||
| paypal phishing | Antiphishing.com.ar | 2021-01-13 04:38:13 | 2021-01-13 04:38:17 | ||
| Alexa Top 1 Million | Maltiverse Research Team | 2020-07-08 05:33:12 | 2020-07-08 05:33:12 | ||
| Adware.Linkun | Hybrid-Analysis | 2020-05-16 04:00:09 | 2020-05-16 04:00:09 | ||
| NA phishing | Antiphishing.com.ar | 2020-03-24 01:57:12 | 2020-03-24 01:57:12 | ||
| HEUR:Trojan.Diple | Hybrid-Analysis | 2020-03-23 20:45:36 | 2020-03-23 20:45:36 | ||
| BehavesLike.AdwareFileTour | Hybrid-Analysis | 2019-04-15 14:00:49 | 2020-03-02 01:00:14 | ||
| Adware.BrowseFox | Hybrid-Analysis | 2020-02-28 15:00:59 | 2020-02-28 15:00:59 | ||
| Downloader.ci | Hybrid-Analysis | 2020-01-04 13:00:23 | 2020-01-04 13:00:23 | ||
| Malicious domain | SANS Internet Storm Center | 2019-12-22 02:43:57 | 2019-12-22 02:43:57 | ||
| BScope.Hoax.ArchSMS | Hybrid-Analysis | 2019-09-28 00:17:10 | 2019-09-28 00:17:10 | ||
| Artemis | Hybrid-Analysis | 2019-09-17 15:00:50 | 2019-09-17 15:00:50 | ||
| Trojan.JS.Agent.JS | Hybrid-Analysis | 2019-09-09 08:00:15 | 2019-09-09 08:00:15 | ||
| ml.Generic | Hybrid-Analysis | 2019-06-19 10:00:26 | 2019-06-19 10:00:26 | ||
| Trojan.PSW.Azorult | Hybrid-Analysis | 2019-06-17 05:15:04 | 2019-06-17 05:15:04 | ||
| Pua.Downloadmanager | Hybrid-Analysis | 2019-04-11 18:45:47 | 2019-04-11 18:45:47 | ||
| NSIS.Application.Agent | Hybrid-Analysis | 2019-04-11 18:45:32 | 2019-04-11 18:45:32 | ||
| Trojan.Script | Hybrid-Analysis | 2018-10-11 04:30:06 | 2019-04-04 17:30:14 | ||
| Trojan.Html.Iframe | Hybrid-Analysis | 2019-04-01 13:00:09 | 2019-04-01 13:00:09 | ||
| Bankfraud.JS | Hybrid-Analysis | 2019-01-28 05:45:06 | 2019-01-28 05:45:06 | ||
| Static engine | Hybrid-Analysis | 2018-09-20 03:00:08 | 2018-09-20 03:00:08 | ||
| Trojan.Script.Obfuscated | Hybrid-Analysis | 2018-09-05 09:01:05 | 2018-09-14 16:15:16 | ||
| Trojan.Script.Heuristic | Hybrid-Analysis | 2018-08-22 12:00:10 | 2018-08-22 12:00:10 | ||
| OpenCandy | Hybrid-Analysis | 2018-05-01 16:00:35 | 2018-05-01 16:00:35 | ||
| Trojan.WisdomEyes.16070401.9500 | Hybrid-Analysis | 2018-04-18 18:46:42 | 2018-04-18 18:46:42 | ||
| JS:Trojan.JS.Phishing | Hybrid-Analysis | 2018-04-09 15:15:10 | 2018-04-09 15:15:10 | ||
| autoit ,rat ,xtrat | Maltiverse | 2018-03-21 13:18:15 | 2018-03-21 13:18:15 | ||
| evasive | Maltiverse | 2018-03-20 11:17:38 | 2018-03-20 11:17:38 | ||
| phishing | Maltiverse | 2018-03-13 13:04:30 | 2018-03-13 13:04:30 | ||
| banker,retefe | Maltiverse | 2018-01-19 16:31:58 | 2018-01-19 16:31:58 | ||
| banker,evasive,retefe | Maltiverse | 2018-01-17 14:15:10 | 2018-01-17 14:15:10 |
Tags
phishing banker evasive retefe autoit rat xtratIP addresses resolved by this hostname
- 23.74.10.55 (2019-12-22 02:43:57)
- 104.93.165.143 (2018-04-09 15:15:11)
- 151.101.137.21 (2026-08-18 13:32:11)
Whois information
- AS name
- AS35994 Akamai Technologies, Inc.
- Domain
- paypal.com
- TLD
- com
- DNSSEC
- ['signedDelegation']
- Nameservers
- NS1.P57.DYNECT.NET, NS2.P57.DYNECT.NET, PDNS100.ULTRADNS.COM, PDNS100.ULTRADNS.NET, ns1.p57.dynect.net, pdns100.ultradns.net., pdns100.ultradns.com., ns2.p57.dynect.net, NS1-PCHNET.PAYPAL.COM, NS2-PCHNET.PAYPAL.COM, pdns100.ultradns.net, ns1-pchnet.paypal.com, pdns100.ultradns.com, ns2-pchnet.paypal.com
- Whois server
- whois.markmonitor.com
- Registrant
- MarkMonitor, Inc.
- Address
- 2211 North First Street,
- City
- San Jose
- State
- CA
- Country
- US — United States 🇺🇸
- Contact email
- [email protected], [email protected], [email protected]
- Domain created
- 1999-07-15 05:32:11
- Domain expires
- 2027-07-15 05:32:11
- First indexed
- 2018-01-17 14:15:10
- Last updated
- 2026-08-18 13:32:12