public company · US
PayPal
PayPal Holdings, Inc.
Online payments.
- Primary official domain
- paypal.com
- Reviewed official domains
- 2 (directory review; organization has not verified)
- Directory source
- BreachScout directory · Suggest a correction
Matching domains, 30 days
18
registrable domains containing the brand; source date or last feed observation
First source-reported, 30 days
3
domains first source-reported within 30 days
First observed, 30 days
26
domains first observed by DomainSpoof in feeds
Email policy (primary domain)
Not checked
No email-policy check yet
What we watch for
Hostnames in phishing feeds and certificate logs are matched on these brand tokens; feed target labels are matched on the aliases. Generated spellings (typos, lure words, look-alike characters, other top-level domains) are derived from the official domains and tokens and checked against feeds, certificate logs and DNS.
Generated spellings we track
Spellings generated from this organization's official domains and brand tokens (typos, keyboard slips, lure words, look-alike characters, other top-level domains). Each one is checked against phishing feeds, certificate logs and DNS. A spelling that exists is not a finding and not a verdict: it may be unrelated, legitimate or registered defensively.
Tracked spellings
162
generated 2026-10-19; bounded dictionary, not every possible spelling
Seen in a phishing feed
0
spellings with at least one approved-source feed host on that domain
Seen in certificate logs
0
spellings with a certificate name on that domain in sampled logs
Resolves
0
spellings that answered a DNS query; 0 of 162 checked so far
Lure word added 48 tracked · 0 observed
| Spelling | Derived from | In phishing feed | In certificate logs | Resolves | State |
|---|---|---|---|---|---|
account-paypal[.]com | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
account-paypal[.]me | paypal.me | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
accountpaypal[.]com | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
accountpaypal[.]me | paypal.me | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
login-paypal[.]com | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
login-paypal[.]me | paypal.me | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
loginpaypal[.]com | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
loginpaypal[.]me | paypal.me | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paypal-account[.]com | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paypal-account[.]me | paypal.me | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paypal-login[.]com | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paypal-login[.]me | paypal.me | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paypal-secure[.]com | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paypal-secure[.]me | paypal.me | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paypal-support[.]com | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paypal-support[.]me | paypal.me | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paypal-update[.]com | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paypal-update[.]me | paypal.me | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paypal-verify[.]com | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paypal-verify[.]me | paypal.me | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paypalaccount[.]com | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paypalaccount[.]me | paypal.me | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paypallogin[.]com | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paypallogin[.]me | paypal.me | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paypalsecure[.]com | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paypalsecure[.]me | paypal.me | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paypalsupport[.]com | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paypalsupport[.]me | paypal.me | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paypalupdate[.]com | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paypalupdate[.]me | paypal.me | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paypalverify[.]com | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paypalverify[.]me | paypal.me | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
secure-paypal[.]com | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
secure-paypal[.]me | paypal.me | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
securepaypal[.]com | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
securepaypal[.]me | paypal.me | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
support-paypal[.]com | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
support-paypal[.]me | paypal.me | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
supportpaypal[.]com | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
supportpaypal[.]me | paypal.me | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
update-paypal[.]com | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
update-paypal[.]me | paypal.me | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
updatepaypal[.]com | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
updatepaypal[.]me | paypal.me | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
verify-paypal[.]com | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
verify-paypal[.]me | paypal.me | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
verifypaypal[.]com | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
verifypaypal[.]me | paypal.me | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
Other top-level domain 20 tracked · 0 observed
| Spelling | Derived from | In phishing feed | In certificate logs | Resolves | State |
|---|---|---|---|---|---|
paypal[.]app | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paypal[.]biz | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paypal[.]cc | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paypal[.]club | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paypal[.]co | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paypal[.]help | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paypal[.]icu | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paypal[.]info | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paypal[.]io | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paypal[.]live | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paypal[.]net | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paypal[.]online | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paypal[.]org | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paypal[.]shop | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paypal[.]site | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paypal[.]store | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paypal[.]support | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paypal[.]top | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paypal[.]vip | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paypal[.]xyz | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
Look-alike characters (ASCII) 4 tracked · 0 observed
| Spelling | Derived from | In phishing feed | In certificate logs | Resolves | State |
|---|---|---|---|---|---|
paypa1[.]com | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paypa1[.]me | paypal.me | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paypai[.]com | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paypai[.]me | paypal.me | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
Look-alike characters (internationalized) 8 tracked · 0 observed
| Spelling | Derived from | In phishing feed | In certificate logs | Resolves | State |
|---|---|---|---|---|---|
рaypal[.]comxn--aypal-uye[.]com | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
рaypal[.]mexn--aypal-uye[.]me | paypal.me | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
payрal[.]comxn--payal-xye[.]com | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
payрal[.]mexn--payal-xye[.]me | paypal.me | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paypаl[.]comxn--paypl-7ve[.]com | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paypаl[.]mexn--paypl-7ve[.]me | paypal.me | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
pаypal[.]comxn--pypal-4ve[.]com | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
pаypal[.]mexn--pypal-4ve[.]me | paypal.me | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
Character omitted 12 tracked · 0 observed
| Spelling | Derived from | In phishing feed | In certificate logs | Resolves | State |
|---|---|---|---|---|---|
aypal[.]com | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
aypal[.]me | paypal.me | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
papal[.]com | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
papal[.]me | paypal.me | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
payal[.]com | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
payal[.]me | paypal.me | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paypa[.]com | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paypa[.]me | paypal.me | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paypl[.]com | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paypl[.]me | paypal.me | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
pypal[.]com | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
pypal[.]me | paypal.me | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
Characters swapped 10 tracked · 0 observed
| Spelling | Derived from | In phishing feed | In certificate logs | Resolves | State |
|---|---|---|---|---|---|
apypal[.]com | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
apypal[.]me | paypal.me | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
papyal[.]com | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
papyal[.]me | paypal.me | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
payapl[.]com | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
payapl[.]me | paypal.me | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paypla[.]com | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paypla[.]me | paypal.me | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
pyapal[.]com | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
pyapal[.]me | paypal.me | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
Character repeated 12 tracked · 0 observed
| Spelling | Derived from | In phishing feed | In certificate logs | Resolves | State |
|---|---|---|---|---|---|
paaypal[.]com | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paaypal[.]me | paypal.me | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paypaal[.]com | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paypaal[.]me | paypal.me | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paypall[.]com | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paypall[.]me | paypal.me | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
payppal[.]com | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
payppal[.]me | paypal.me | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
payypal[.]com | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
payypal[.]me | paypal.me | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
ppaypal[.]com | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
ppaypal[.]me | paypal.me | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
Vowel changed 16 tracked · 0 observed
| Spelling | Derived from | In phishing feed | In certificate logs | Resolves | State |
|---|---|---|---|---|---|
paypel[.]com | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paypel[.]me | paypal.me | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paypil[.]com | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paypil[.]me | paypal.me | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paypol[.]com | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paypol[.]me | paypal.me | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paypul[.]com | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paypul[.]me | paypal.me | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
peypal[.]com | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
peypal[.]me | paypal.me | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
piypal[.]com | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
piypal[.]me | paypal.me | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
poypal[.]com | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
poypal[.]me | paypal.me | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
puypal[.]com | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
puypal[.]me | paypal.me | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
Adjacent key typo 32 tracked · 0 observed
| Spelling | Derived from | In phishing feed | In certificate logs | Resolves | State |
|---|---|---|---|---|---|
laypal[.]com | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
laypal[.]me | paypal.me | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
oaypal[.]com | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
oaypal[.]me | paypal.me | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
pahpal[.]com | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
pahpal[.]me | paypal.me | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
patpal[.]com | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
patpal[.]me | paypal.me | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paupal[.]com | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paupal[.]me | paypal.me | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paylal[.]com | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paylal[.]me | paypal.me | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
payoal[.]com | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
payoal[.]me | paypal.me | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paypak[.]com | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paypak[.]me | paypal.me | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paypao[.]com | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paypao[.]me | paypal.me | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paypap[.]com | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paypap[.]me | paypal.me | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paypql[.]com | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paypql[.]me | paypal.me | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paypsl[.]com | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paypsl[.]me | paypal.me | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paypzl[.]com | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
paypzl[.]me | paypal.me | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
pqypal[.]com | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
pqypal[.]me | paypal.me | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
psypal[.]com | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
psypal[.]me | paypal.me | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
pzypal[.]com | paypal.com | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
pzypal[.]me | paypal.me | Not observed | Not observed | Not checkedno DNS check yet | Not observed |
Last feed and certificate-log check 2026-10-19 00:56 UTC. “Not observed” means none of our checks has seen the spelling; it is not proof the name is unregistered. An observed spelling is not a finding: reported abuse appears only under Reported matches, from independent source evidence. Feed presence counts hosts from approved sources only; certificate presence comes from sampled public logs; DNS checks cover the apex name and are refreshed on a schedule.