public company · US
PayPay Corp
- Primary official domain
- Not yet assessed
- Reviewed official domains
- 0 (directory review; organization has not verified)
- Directory source
- BreachScout directory · Suggest a correction
Matching domains, 30 days
0
registrable domains containing the brand; source date or last feed observation
First source-reported, 30 days
0
domains first source-reported within 30 days
First observed, 30 days
15
domains first observed by DomainSpoof in feeds
Email policy (primary domain)
Not checked
No email-policy check yet
What we watch for
Hostnames in phishing feeds and certificate logs are matched on these brand tokens; feed target labels are matched on the aliases. Generated spellings (typos, lure words, look-alike characters, other top-level domains) are derived from the official domains and tokens and checked against feeds, certificate logs and DNS.
Generated spellings we track
Spellings generated from this organization's official domains and brand tokens (typos, keyboard slips, lure words, look-alike characters, other top-level domains). Each one is checked against phishing feeds, certificate logs and DNS. A spelling that exists is not a finding and not a verdict: it may be unrelated, legitimate or registered defensively.
Tracked spellings
90
generated 2026-10-19; bounded dictionary, not every possible spelling
Seen in a phishing feed
0
spellings with at least one approved-source feed host on that domain
Seen in certificate logs
0
spellings with a certificate name on that domain in the logs we collect
Resolves
0
spellings that answered a DNS query; 0 of 90 checked so far
Lure word added 24 tracked · 0 observed
| Spelling | Derived from | In phishing feed | In certificate logs | Resolves | State | |
|---|---|---|---|---|---|---|
account-paypay[.]com | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
accountpaypay[.]com | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
login-paypay[.]com | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
loginpaypay[.]com | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
paypay-account[.]com | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
paypay-login[.]com | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
paypay-secure[.]com | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
paypay-support[.]com | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
paypay-update[.]com | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
paypay-verify[.]com | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
paypayaccount[.]com | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
paypaylogin[.]com | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
paypaysecure[.]com | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
paypaysupport[.]com | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
paypayupdate[.]com | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
paypayverify[.]com | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
secure-paypay[.]com | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
securepaypay[.]com | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
support-paypay[.]com | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
supportpaypay[.]com | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
update-paypay[.]com | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
updatepaypay[.]com | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
verify-paypay[.]com | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
verifypaypay[.]com | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
Other top-level domain 21 tracked · 0 observed
| Spelling | Derived from | In phishing feed | In certificate logs | Resolves | State | |
|---|---|---|---|---|---|---|
paypay[.]app | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
paypay[.]biz | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
paypay[.]cc | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
paypay[.]club | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
paypay[.]co | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
paypay[.]help | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
paypay[.]icu | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
paypay[.]info | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
paypay[.]io | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
paypay[.]live | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
paypay[.]me | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
paypay[.]net | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
paypay[.]online | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
paypay[.]org | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
paypay[.]shop | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
paypay[.]site | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
paypay[.]store | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
paypay[.]support | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
paypay[.]top | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
paypay[.]vip | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
paypay[.]xyz | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
Look-alike characters (internationalized) 4 tracked · 0 observed
| Spelling | Derived from | In phishing feed | In certificate logs | Resolves | State | |
|---|---|---|---|---|---|---|
рaypay[.]comxn--aypay-uye[.]com | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
payрay[.]comxn--payay-xye[.]com | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
paypаy[.]comxn--paypy-7ve[.]com | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
pаypay[.]comxn--pypay-4ve[.]com | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
Character omitted 6 tracked · 0 observed
| Spelling | Derived from | In phishing feed | In certificate logs | Resolves | State | |
|---|---|---|---|---|---|---|
aypay[.]com | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
papay[.]com | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
payay[.]com | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
paypa[.]com | paypay | Not observed | Not observed | Not checkedno DNS check yet | MXSPFDMARCchecked 2026-10-19 | Not observed |
paypy[.]com | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
pypay[.]com | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
Characters swapped 5 tracked · 0 observed
| Spelling | Derived from | In phishing feed | In certificate logs | Resolves | State | |
|---|---|---|---|---|---|---|
apypay[.]com | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
papyay[.]com | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
payapy[.]com | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
paypya[.]com | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
pyapay[.]com | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
Character repeated 6 tracked · 0 observed
| Spelling | Derived from | In phishing feed | In certificate logs | Resolves | State | |
|---|---|---|---|---|---|---|
paaypay[.]com | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
paypaay[.]com | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
paypayy[.]com | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
payppay[.]com | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
payypay[.]com | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
ppaypay[.]com | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
Vowel changed 8 tracked · 0 observed
| Spelling | Derived from | In phishing feed | In certificate logs | Resolves | State | |
|---|---|---|---|---|---|---|
paypey[.]com | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
paypiy[.]com | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
paypoy[.]com | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
paypuy[.]com | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
peypay[.]com | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
piypay[.]com | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
poypay[.]com | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
puypay[.]com | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
Adjacent key typo 16 tracked · 0 observed
| Spelling | Derived from | In phishing feed | In certificate logs | Resolves | State | |
|---|---|---|---|---|---|---|
laypay[.]com | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
oaypay[.]com | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
pahpay[.]com | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
patpay[.]com | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
paupay[.]com | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
paylay[.]com | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
payoay[.]com | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
paypah[.]com | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
paypat[.]com | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
paypau[.]com | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
paypqy[.]com | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
paypsy[.]com | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
paypzy[.]com | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
pqypay[.]com | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
psypay[.]com | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
pzypay[.]com | paypay | Not observed | Not observed | Not checkedno DNS check yet | Not checked | Not observed |
Last feed and certificate-log check 2026-10-19 05:45 UTC. “Not observed” means none of our checks has seen the spelling; it is not proof the name is unregistered. An observed spelling is not a finding: reported abuse appears only under Reported matches, from independent source evidence. Feed presence counts hosts from approved sources only; certificate presence comes from the public logs described on the Certificates tab; DNS checks cover the apex name and are refreshed on a schedule. Mail (MX, SPF, DMARC) is checked only for spellings observed somewhere; mail records show the domain can send or receive mail; they do not show who operates it.