paypal-demo.pages[.]dev
Category: Information Technology
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of paypal-demo.pages[.]dev
The domain paypal-demo.pages[.]dev appears to be a web application or demonstration page hosted on a Cloudflare Pages subdomain. Based on the page title, visible branding, and screenshot, it presents itself as a PayPal-style dashboard with account balance, wallet, activity, and location verification elements. The lower portion of the page also shows developer-oriented content, including architecture diagrams, API/SDK references, and code snippets, which suggests it may be a prototype, mock interface, or technical demo rather than an official production banking portal.
The site does not appear to be operating on PayPal's primary corporate domain. Instead, it uses a pages.dev hosting subdomain, which is commonly used for static sites, demos, and developer deployments. That mismatch between the well-known PayPal brand presentation and the non-official hosting domain is notable, especially because the page imitates a financial account dashboard experience.
Safety Assessment for paypal-demo.pages[.]dev
This website raises meaningful trust concerns based on available scan data and visual indicators. At the time of this scan, 4 out of 94 security engines flagged the URL, including phishing-related detections, while other malware and blacklist checks did not report active threats. Mixed results like this can occur with newly deployed or limited-scope abuse pages, but they still warrant caution when the content resembles a financial login or account dashboard.
The strongest concern is that the domain closely presents itself as a PayPal-branded experience while being hosted on a third-party pages.dev subdomain rather than an official PayPal-owned domain. In plain terms, it resembles PayPal and may be a look-alike page intended for demonstration, testing, or potentially deceptive use. Financial-brand look-alikes can be used to collect credentials, payment details, or personal information even when broader malware scans appear clean.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site is served over HTTPS with a valid Let's Encrypt certificate and is fronted by Cloudflare infrastructure, with the resolved server IP associated with Cloudflare hosting in Canada. The domain has been registered for several years and is not newly created, but it is a subdomain under pages.dev rather than a standalone corporate domain. DNSSEC appears to be unsigned at the time of this scan.
From a security posture standpoint, the main issue is not the TLS setup but the contextual mismatch between the PayPal branding and the hosting environment. A valid certificate only confirms encrypted transport to the current host; it does not verify that the site is operated by the brand being displayed. The combination of brand-like financial UI, phishing-related detections from several security engines, and non-official hosting should be treated as a significant warning sign.
Share your experience with this website. Was it safe? Did you encounter any issues?