paypal-account-login[.]eliaswebstudio[.]com

On 23 July 2026 the domain paypal-account-login.eliaswebstudio.com was recorded as offline but continues to appear on at least one active security blocklist. Registration data shows the domain was created on 8 March 2026. DNS resolution points to the IPv4 address 82.25.102.143, which belongs to AS47583 Hostinger International Limited and is geolocated to Germany. The host presents an SSL certificate identified as R13, a standard commercial certificate that does not provide additional trust signals.

VirusTotal scanning returned 23 detections out of 94 engines, aligning with the classification of an E‑Commerce scam that impersonates the PayPal brand. The domain is explicitly listed in the PhishDestroy blocklist, confirming that a reputable anti‑phishing feed has taken mitigation action. The threat rating is elevated, reflecting the potential for credential harvesting against PayPal users.

Current evidence does not include a captured page title, content hash, or information about the phishing kit used, so the precise visual design and any embedded malware remain unknown. Observers should maintain watch‑list status on the IP 82.25.102.143 in case the host becomes active again, enforce URL filtering for the full domain, and propagate the domain hash to endpoint protection solutions. Organizations that integrate PayPal payments should remind users to verify the authenticity of login URLs, encourage reporting of unsolicited PayPal‑related communications, and consider additional authentication controls to mitigate credential‑theft risk.