sicheres-update[.]com

Analysis of sicheres-update.com indicates a confirmed PayPal brand impersonation phishing domain, currently offline as of July 24, 2026. The domain was registered on October 13, 2025, through MAT BAO CORPORATION and resolves to IP 78.40.143.162, hosted on AS45839 (Shinjiru Technology Sdn Bhd) in Bulgaria. No SSL certificate was detected, increasing the risk of unencrypted credential harvesting. The page title explicitly displays 'PayPal,' aligning with the reported scam type of e-commerce fraud.

Detection coverage includes 17 of 95 security vendors on VirusTotal flagging the domain, alongside listings in 17 AlienVault OTX threat intelligence pulses and one security blocklist. PhishDestroy has also blocked this domain. Nameservers ns1.peruadelante.com and ns2.peruadelante.com suggest shared or compromised infrastructure, though no direct ties to known phishing kits are confirmed.

Defenders should treat this domain as high-risk for PayPal credential theft and financial fraud, particularly in campaigns targeting German-speaking users (implied by the domain's language cues). Given its offline status, monitoring for re-emergence under the same or similar infrastructure is recommended. No evidence of active payload delivery or post-compromise redirection was identified in available data.