8

This has all traits of phishing, apart from the extended validation SSL cert. Is this site run by the real PayPal?

enter image description here

Improve this question

3 Answers 3

Reset to default
9

I believe it is legitimate. If you visit paypal.com, switch to the "Germany - Deutsch" site and check out the links on the resulting site, you can see that, for example, the "Sicherheit" (Google translate as "Security") link points to https://www.paypal-deutschland.de/sicherheit/.

Of course, one could argue that this means very little.

If in doubt, visit paypal.com and use the designated German site which appears to remain on the paypal.com main domain.

Improve this answer
6

Only trusting the CA that this page is legitimate may not be the best solutions.

I fired up Google and looked at the site from that perspective:

Links going into suspsected phising site from paypal.com:

link:www.paypal-deutschland.de -site:www.paypal-deutschland.de SITE:paypal.com

About 3,930,000 results. I verified several of them, and Paypal.com is infact linking directly to the suspected phising site.

With that I would trust this site a whole lot more. Not only is a trusted CA telling you that this is Paypal's company, but Paypal is also telling you that this is their site. Unless the attackers has managed to compromise Paypal.com's sourcecode via injection or some other vulnerability it is very likely that this site is safe.

Improve this answer
5

I'm going to go ahead and say the unexpected - it looks legitimate to me actually.

A quick whois on the domain shows that the same DNS servers serve paypal-deutschland.de as paypal.com (as well as the registration information being almost identical in every other way) - this, in addition to an SSL Cert from VeriSign would be quite difficult to fake. The SSL Certificate being issued from Singapore looks suspect, I will admit, however it appears as though this exact matter was discussed in This German Forum.

That said, if you wanted to be 100% sure you could always contact PayPal support.

Improve this answer
3
  • 3
    I've also seen paypal.com redirect me to paypal-business.co.uk, which gave me quite a shock a few times. It's like they're trying to look like a fake...
    – RomanSt
    Commented Jul 5, 2012 at 20:13
  • 3
    Same goes with their shady emails. They dont look legit at all.... pretty much fail all over the place!
    – Chris Dale
    Commented Jul 5, 2012 at 20:39
  • 1
    Singapore, SG means the company is based in Singapore, not the cert was issued from Singapore. PayPal Private Ltd. is really located in Singapore.
    – MV.
    Commented Jul 6, 2012 at 1:59

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .