public company · US
PayPal
PayPal Holdings, Inc.
Online payments.
- Primary official domain
- paypal.com
- Reviewed official domains
- 2 (directory review; organization has not verified)
- Directory source
- BreachScout directory · Suggest a correction
What we watch for
Hostnames in phishing feeds and certificate logs are matched on these brand tokens; feed target labels are matched on the aliases. Generated spellings (typos, lure words, look-alike characters, other top-level domains) are derived from the official domains and tokens and checked against feeds, certificate logs and DNS.
Official domains and email policies
Domains reviewed as belonging to PayPal. DMARC helps receivers check the From domain; lookalike domains remain possible. Published policies cannot confirm actual mail configuration or receiver behavior.
| Domain | Relationship | Evidence | DMARC policy | Policy source | SPF | Reporting | Last check |
|---|---|---|---|---|---|---|---|
| paypal.com | primaryReviewed — | Portfolio directory (financedb_ticker_A) | Not checked | Not checked | Not checked | Not checked | Not checked |
| paypal.me | subsidiaryReviewed 2026-10-18 | DomainSpoof directory (seed) | Not checked | Not checked | Not checked | Not checked | Not checked |
“Not checked”: no check yet. “Lookup failed”: DNS result unknown. Report mailbox names are redacted.
Reports on official domains appear under “Official assets with reports” on the Reported matches tab.

