paypalverification[.]netlify[.]app

PhishDestroy has identified paypalverification.netlify.app as an active phishing site specifically targeting PayPal users. This domain is currently live and poses a high risk of credential theft by impersonating the legitimate PayPal login page. The site was created on April 14, 2026, and is registered through Netlify, a common platform for hosting such fraudulent pages.

Technical analysis reveals that the domain resolves to IP address 63.176.8.218 and uses a DigiCert SSL certificate, which may give users a false sense of security. It appears on one security blocklist and has been flagged by Google Safe Browsing for phishing. VirusTotal reports that 20 out of 95 security vendors classify this domain as malicious. The page title, "Log in to your PayPal account," closely mimics the real PayPal login interface to trick victims into entering their credentials.

This phishing campaign remains active, and users should avoid interacting with the site entirely. PhishDestroy recommends never entering login credentials on pages accessed via unsolicited links or emails. Always verify URLs by typing them directly into the browser and enable two-factor authentication on your PayPal account for added security. If you have already submitted information, change your password immediately and contact PayPal support.