Verdict
paypal-opladen.be shows high-risk / scam indicators.
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
| What this site appears to be | Short Dutch page prompting login to add money via Bancontact to a PayPal account; minimal explanatory content and prominent cookie acceptance text. |
|---|
Evidence status and limitations
Evidence completeness: UNKNOWN
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | None flagged itVirusTotal | Clear |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0 reportsAbuseIPDB; shared hosting inflates this count | Noted |
| Domain age | 11 years oldRegistered history | Clear |
| Web archive | Archived since 20161154 snapshots | Clear |
| Certificate | Encrypted connectionIssued by DigiCert Global G2 TLS RSA SHA256 2020 CA1 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: more than 10 years (registration continuity).
- Public web-archive history exists since 2016.
- No flags from the reputation services TrustSniffer consulted at assessment time.
Full analysis
Overview
This website is a Dutch-language page presenting a PayPal-branded flow for adding money to a PayPal account through Bancontact, with visitors prompted to log in before funding an account; its apparent purpose is to facilitate online payment-account top-ups.
Scam/Impersonation Risk
No confirmed blacklist, phishing, impersonation, or conflicting-identity signal is present in the supplied evidence. However, the page presents almost no organisational context while requesting a PayPal login for a financial action, and its sensitive login/payment form is identified as having an untrusted destination. This combination creates a substantial credential and payment-channel risk even though the available evidence does not establish confirmed brand impersonation. The page’s Dutch wording, “PayPal Opladen,” and references to Bancontact and PayPal are not sufficient to prove an official relationship with PayPal.
- The Dutch-language top-up page states “Geld toevoegen met Bancontact” and prompts the visitor to log in with PayPal before adding funds.
- The page contains one sensitive login/payment form and records an untrusted form destination.
- The domain was registered on 2015-03-03 and is approximately 11.48 years old.
- Historical records contain 1,154 snapshots from 2016-07-08 through 2026-04-23, spanning 11 tracked years.
Regulatory Verification Notes
The supplied page content does not identify a clear operating organisation, licence, regulatory authority, or licence number for the financial activity it presents. This is a material disclosure gap for a service requesting account access and payment activity, but it is a verification issue rather than evidence of a confirmed scam. The transport certificate is an OV certificate naming PayPal, Inc.; that confirms certificate subject information and encrypted transport, not that the website itself is operated or authorised by PayPal. Available external reputation evidence contains no reported blacklist or malicious-hit result, although coverage is partial.
- The supplied page content contains no stated licence authority or licence number.
- The site is served from AS15879, KPN-INTERNEDSERVICES - Vancis IP B.V., NL.
- TLS is issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1 at OV validation level, with validity through 2026-12-08.
- The certificate subject organisation is PayPal, Inc., while independent operator identity remains unverified.
What to Verify Next
Before any sensitive interaction, independently confirm that the domain is an officially authorised PayPal property through PayPal’s published support or security channels rather than through contact details presented on the site. Confirm the responsible legal entity and any applicable Belgian payment-service authorisation with the relevant official registry. If the relationship cannot be independently established, credentials and payment authorisations should not be submitted.
- Confirm the domain through an independently obtained official PayPal channel.
- Obtain the operator’s legal identity and verify any claimed authorisation directly with the relevant regulator or registry.
- Use the official PayPal application or a manually entered, established PayPal domain for account funding instead of following the assessed page’s sign-in path.
Summary Verdict
The overall posture is critical trust with sensitive-interaction risk. The site has a long registration and historical presence, but the current login-and-funding presentation does not provide sufficient evidence that its operator or payment relationship is authorised. Normal browsing may be treated separately from credential, account-access, or financial activity.
Infrastructure Integrity
The site resolves to a direct hosting arrangement without a detected mainstream CDN or WAF layer, so the infrastructure provides limited additional protective mitigation for the sensitive interaction being presented. The hosting environment is technically resolved and identified, but infrastructure alone does not establish legitimacy.
Closing Assessment
The proportionate course is to avoid sign-in, credential submission, and payment authorisation until the domain, operator, and regulatory status have been independently confirmed through official channels.
Written analysis generated 2026-08-21 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
2 findings contributed to this verdict, raised by registration and ownership, page content, governance.
01 Governance Risk
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE - The page presents a sign-in form, and the operator behind it could not be independently verified.Page content
rule:PAGE_TYPE_LOGIN_UNVERIFIED - A form asking for sensitive information submits somewhere TrustSniffer could not verify, which caps how far the score can rise.Governance
rule:GOV_SENSITIVE_FORM_UNTRUSTED
02 Sensitive Interaction Risk
- A form on the page submits to a destination TrustSniffer could not verify.Page content
rule:PAGE_FORM_UNTRUSTED_DEST - The page asks visitors for sensitive information.Page content
rule:PAGE_FORM_SENSITIVE
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of paypal-opladen.be.
- The request stayed on paypal-opladen.be. It was not redirected to another domain. Clear
- DNS for this domain is served by ultradns.com. Noted
- The earliest public archive of this site is from 2016-07-08. Clear
- It is hosted on KPN-INTERNEDSERVICES, from a server in NL. Noted
Domain intelligence
| Registrar | Not available |
|---|---|
| Hosting | KPN-INTERNEDSERVICES - Vancis IP B.V., NL |
| Country | NL |
| Server IP | 82.201.58.154 |
| Name servers | pdns100.ultradns.com |
| SSL issuer | DigiCert Global G2 TLS RSA SHA256 2020 CA1 |
| SSL expiry | 2026-12-08 |
| Domain age | 11.48 years (continuous registration) |
| Domain expiry | Not available |
| Archive first seen | 2016-07-08 |
| Archive snapshots | 1154 |
| Reputation | VirusTotal: 0 flagged | AbuseIPDB: 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about paypal-opladen.be at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.