Is king.paypalads.com safe?

No. MalwareAnalyzer scanned king.paypalads.com on 22 Aug 2026 and returned a suspicious verdict with a score of 50 out of 100, categorised as phishing. Treat it as hostile until it is re-checked.

How was king.paypalads.com checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

king.paypalads.com - suspicious URL scan, 22 Aug 2026

MalwareAnalyzer by Cyble scanned king.paypalads.com and returned a suspicious verdict (score 50), categorised as phishing. The page resolved to 142.250.207.19 on Google LLC in JP. The domain was registered 1773 days ago through Squarespace Domains LLC. 17 domains and 14 IPs were contacted, over 70 HTTP requests. This is a point-in-time observation from 22 Aug 2026; the page may have changed since.

Scan result

Verdict: suspicious (score 50) · Confidence 56%
Scanned URL: https://king.paypalads.com/
Domain: king.paypalads.com · IP: 142.250.207.19 · AS15169 · JP
Server: GSE
Page title: jasonmorrow
HTTP status: 200 · text/html; charset=UTF-8
Registrar: Squarespace Domains LLC · domain age 1773 days · created 2021-10-14
TLS issuer: C=US, O=Google Trust Services, CN=WR3 · valid to Oct 28 17: · subject CN=king.paypalads.com
HTTP requests captured: 70 · cookies set: 11 · outgoing links: 41
Scan tier: standard · observed 2026-08-22 18:35:21 UTC

Antivirus & YARA (0 of 48 engines)

No engine flagged this page's content.

Why this verdict

Domain impersonates paypal (combosquat)
Runtime data beacon to pagead2.googlesyndication.com

Detected technologies

Google Analytics

Contacted infrastructure

142.250.207.19 - AS15169 Google LLC (Japan)
142.250.183.34 - AS15169 Google LLC (India)
142.250.207.9 - AS15169 Google LLC (Japan)
104.17.208.5 - AS13335 Cloudflare, Inc. (United States)
142.250.183.51 - AS15169 Google LLC (US)
142.250.195.136 - AS15169 Google LLC (India)
142.250.195.238 - AS15169 Google LLC (India)
142.250.195.169 - AS15169 Google LLC (India)
142.251.42.98 - AS15169 Google LLC (India)
142.250.195.98 - AS15169 Google LLC (India)
142.250.195.225 - AS15169 Google LLC (India)
142.251.153.119 - AS15169 Google LLC (Netherlands)

Observed indicators

king.paypalads.com
www.blogger.com
pagead2.googlesyndication.com
fundingchoicesmessages.google.com
www.googletagmanager.com
www.paypalads.com
www.h0uses.shop
images.unsplash.com
cdn.jsdelivr.net
www.firimumu.paypalads.com
upload.wikimedia.org
resources.blogblog.com
googleads.g.doubleclick.net
www.google-analytics.com
ep1.adtrafficquality.google
ep2.adtrafficquality.google
www.google.com
142.250.207.19
142.250.183.34
142.250.207.9

Questions about king.paypalads.com

Is king.paypalads.com safe?: No. MalwareAnalyzer scanned king.paypalads.com on 22 Aug 2026 and returned a suspicious verdict with a score of 50 out of 100, categorised as phishing. Treat it as hostile until it is re-checked.
How was king.paypalads.com checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of king.paypalads.com

Scanned on MalwareAnalyzer by Cyble · Open interactive scan