paypal[.]myproccesing[.]com

paypal.myproccesing.com is a newly registered domain created on July 26, 2026. The domain resolves to the Cloudflare‑hosted address 104.21.11.136 and uses the authoritative nameservers kinsley.ns.cloudflare.com and martin.ns.cloudflare.com. Registration was performed through TUCOWS.COM in Colombia, a registrar frequently observed in malicious infrastructure. Multiple phishing‑specific blocklists have already listed the domain; it is currently blocked by PhishDestroy, OpenPhish, and Phishunt, and appears on three separate security blocklists. VirusTotal analysis shows that 21 of 91 scanning engines label the domain as malicious, indicating a high confidence of phishing intent.

The threat type is identified as banking phishing, targeting PayPal users, and the risk level is assessed as high. The domain remains active as of the report date, July 29, 2026, and no evidence of takedown or remediation has been observed. No public SSL certificate details, HTTP response codes, or page title information are available, so the exact content of the landing page cannot be confirmed. Likewise, no references to OTX or other threat‑intel feeds are present in the current dataset.

Defenders should immediately block DNS resolution to 104.21.11.136 and add the domain to local deny lists. Email gateways should be configured to quarantine messages containing URLs that resolve to this domain, and URL filtering solutions should enforce the blocklists that already flag it. Continuous monitoring of the associated IP address and the Cloudflare nameservers is advised, as the infrastructure may be reused for additional phishing campaigns. Incident response teams should treat any credential submissions to this domain as compromised and trigger credential‑reset procedures for affected accounts.