Finding

paypal[.]cardpaysecurity[.]org

URLs are shown as non-clickable text with parameters redacted. Share: https://domainspoof.org/findings/49889

Source claims

Listed by PhishDestroy Primary (content-verified)Present in latest snapshot
Indicator
paypal[.]cardpaysecurity[.]org
Source submitted
Not returned by source
Source verified
Not returned by source
Source online flag
Not returned by source
First observed by DomainSpoof
2026-10-18 20:32 UTC
Last successful snapshot with record
2026-10-19 04:07 UTC
Date basis
Observed in feed 2026-10-19
Attribution
Curated phishing domains from PhishDestroy (phishdestroy.io), content-verified subset, MIT licensed. Copyright (c) PhishDestroy. · terms

Company association (DomainSpoof's assessment)

PayPal Possible association Brand in hostname
Rule
Distinctive brand token found in hostname (token v1.0)
Matched input
paypal
Confidence
0.60
Relationship
Impersonation candidate
Review
auto

A company match may be wrong. A targeted brand may differ from the site hosting the lure. Suggest a correction.

Hostname and DNS (DomainSpoof collector, DNS-over-HTTPS via Cloudflare)

Registrable domain
cardpaysecurity[.]org
Public suffix
org
First / last observed by DomainSpoof in feeds
2026-10-18 / 2026-10-18
Latest DNS status
Not checked
Registrar
GoDaddy.com, LLC
IANA registrar ID
146
Registration created
2024-09-20
Registration expires
2027-09-20
Registration last changed
2026-09-22
Nameservers
ns-1356[.]awsdns-41[.]org, ns-1796[.]awsdns-32[.]co[.]uk, ns-72[.]awsdns-09[.]com, ns-921[.]awsdns-51[.]net
Registrant country
Not returned (registrant identity is not displayed)
RDAP status codes
client delete prohibited, client renew prohibited, client transfer prohibited, client update prohibited, auto renew period
RDAP source
rdap.publicinterestregistry.org retrieved 2026-10-19 03:53 UTC
Presented TLS certificate
Not checked

No DNS observation in our coverage.

IP-list matches

No match in the IP lists checked. This does not establish safety.