bbvirtua4l-cancelarbgtal[.]iceiy[.]com

PhishDestroy identifies bbvirtua4l-cancelarbgtal.iceiy.com as an active PayPal-themed phishing domain designed to deceive users into surrendering login credentials. This domain mimics official PayPal cancellation pages to harvest account details, posing an elevated risk to unwary users. The infrastructure behind this campaign is deliberately crafted to appear legitimate at first glance, leveraging subdomain obfuscation to evade detection.

Security telemetry confirms this domain’s malicious nature, with 7 out of 95 VirusTotal vendors flagging it as a phishing host. This domain was registered on December 6, 2020, through Porkbun LLC, and resolves to IP address 185.27.134.139. The SSL certificate issued by ZeroSSL further lends false credibility to the site, a common tactic employed by phishing operators to bypass browser warnings. Despite its age, the domain remains active and continues to pose a threat to unsuspecting targets.

Users who have accessed this domain should immediately review their PayPal account for unauthorized activity and change their credentials using a secure, non-compromised device. Enable multi-factor authentication if not already active, and monitor financial statements for suspicious transactions. Additionally, clear browser cache and cookies associated with this domain, and consider running a reputable antivirus scan to detect any residual threats. Report the domain to PayPal’s fraud team and your local cybersecurity authority to help mitigate further abuse of this infrastructure.