Domain paypal.com-cgi-bin-webscrcmd-login-submitdispatch-8254d60a2.hit.to is on a public threat-intelligence list (hagezi-tif.medium): phishing, malware or scam infrastructure.
Don't open this site. It appears on a public list of phishing, malware or scam domains, or Flockward confirmed an attack here. AI agents can check any link before opening it: GET https://flockward.com/v1/check?url= or the MCP server at https://flockward.com/mcp.
<a href="https://flockward.com/site/paypal.com-cgi-bin-webscrcmd-login-submitdispatch-8254d60a2.hit.to"><img src="https://flockward.com/badge/paypal.com-cgi-bin-webscrcmd-login-submitdispatch-8254d60a2.hit.to.svg" alt="Flockward: Unsafe"></a>Tell agents about it too: add
Checked by Flockward: https://flockward.com/site/paypal.com-cgi-bin-webscrcmd-login-submitdispatch-8254d60a2.hit.to to your llms.txt.Checked 2026-11-15. We look at your home page for hidden instructions aimed at AI agents and check your domain against public threat lists and Flockward's own findings. JSON: /v1/site/paypal.com-cgi-bin-webscrcmd-login-submitdispatch-8254d60a2.hit.to