Lookalike Domain Analysis
Detailed risk assessment for paypal-refund.com
Domain Information
DNS Records
Risk Score Breakdown
This risk score shows how dangerous this lookalike domain is. Higher scores indicate more active threats. Each indicator below adds points to the score (max 100).
Domain is on Cisco Talos intelligence blacklist
Registrar 'Hosting Ukraine LLC' not on dangerous list
MX record 'mx.services.' not on dangerous list
Email servers configured: mx.services.
SPF authentication configured with sending directives
Website status: Phishing
Website status: Phishing
Domain has a phishing website
Domain registered 23 days ago (less than 30 days)
Threat Level
Immediate action required. This domain is actively threatening your brand. Request takedown now.
Request TakedownKey Threat Signals
- Talos Blacklisted Yes
- Website Active No
- Email Capability Enabled
- Email Authentication Configured
- Taken Down No
Related Threats
Other domains attacking paypal.com
Remove This Threat
Our specialist team removes malicious domains in 24-48 hours.
Start Takedown Process
Detect Lookalike Domains
Find domains that impersonate your brand. Scan for lookalike domains that could be used for phishing or fraud.
Scan for Lookalikes