# manuelperujo.com — SUSPICIOUS

> PhishDestroy identifies manuelperujo.com as a PayPal credential phishing page. Flagged by 4 of 95 VirusTotal vendors. Check the full report.

## Summary
PhishDestroy identifies manuelperujo.com as an active PayPal credential harvesting domain. This site is currently engaged in phishing operations designed to impersonate the legitimate PayPal login portal, tricking users into entering their sensitive credentials under false pretenses.  This domain was flagged by 4 of 95 VirusTotal security vendors as of the latest analysis. It was registered through DonDominio (SCIP) and resolves to IP address 31.214.178.78. The domain was created on December 21, 2017, and currently holds an SSL certificate issued by Soluciones Corporativas IP SL. Despite its age, this domain remains active and continues to pose a credible threat to users who may encounter it.  Given the elevated risk level and confirmed malicious activity, PhishDestroy strongly recommends that users avoid accessing manuelperujo.com entirely. Security teams should consider blocking this domain at the network level using the provided IP address (31.214.178.78) and domain name. If credential exposure is suspected, affected users should immediately change their PayPal passwords and enable multi-factor authentication. Additionally, reporting this domain to PayPal’s phishing abuse channels can help mitigate further abuse.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2017-12-21 09:14:03
- Registrar: DonDominio (SCIP)
- IP: 31.214.178.78

## Detection Status
- VirusTotal: 4 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/bd3ce5c6-0b1b-43ad-b865-b576c18f25f3
- PhishDestroy: https://phishdestroy.io/domain/manuelperujo.com/
- LLM endpoint: https://phishdestroy.io/domain/manuelperujo.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/manuelperujo.com/
Last updated: 2026-03-22