Security Scan Report: www.paypal.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 21 IPs in 2 countries across 13 domains to perform 140 HTTP transactions. The main domain is paypal.com and was registered 27 years ago.

Submitted URL: https://www.paypal.com/no/cshelp/article/hvorfor-mottar-jeg-e-postmeldinger-eller-sms-er-fra-paypal-n%C3%A5r-jeg-ikke-har-en-konto-help385?v=1&utm_source=unp&utm_medium=email&utm_campaign=RT002668&utm_unptid=df6a60e4-c7fd-11f1-b130-9f4f97ad5799&ppid=RT002668&cnac=NO&rsta=no_NO(nb-NO)&unptid=df6a60e4-c7fd-11f1-b130-9f4f97ad5799&calc=ed1b9748d767b&unp_tpcid=legal-tickler-notifications&page=main%3Aemail%3ART002668&pgrp=main%3Aemail&e=cl&mchn=em&s=ci&mail=sys&appVersion=1.448.0&tenant_name=PayPal&xt=186218182450186220175543104038184933184935180658&xe=115153114833115152114002101255114941115052114543&link_ref=article_why-am-i-receiving-emails-from-paypal-when-i-dont-have-an-account-faq4172

The Cisco Umbrella rank of the primary domain is #1,990 of the top 1 million websitesTop 10K Site

AI Security Verdict

Safe Website

Confidence: 97%

0
Risk Score

Official PayPal help article on paypal.com explaining why users may receive unsolicited PayPal emails/SMS and how to report phishing. Self-branded, no credential forms, no threat-intel hits — legitimate.

Safety Factors (5)
Official paypal.com domain with matching self-branding in title and meta tags
Established 27-year-old domain with top-10K reputation ranking
Content is defensive/educational anti-phishing help material
No forms collecting credentials or payment data
No threat-intelligence, malware or network IDS hits
Domain age information unavailable

Details

Page Title

Hvorfor mottar jeg e-postmeldinger eller SMS-er fra PayPal når jeg ikke har en konto? | PayPal NO

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'www.paypal.com' is registered; it also runs on subdomain 'www'. Its registrable label 'paypal' stretches across 6 characters containing two vowels alongside 4 consonants. Splitting it apart reveals one word: paypal. The median word length lands at 6 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.paypal.com/no/cshelp/article/hvorfor-mottar-jeg-e-postmeldinger-eller-sms-er-fra-paypal-n%C3%A5r-jeg-ikke-har-en-konto-help385?v=1&utm_source=unp&utm_medium=email&utm_campaign=RT002668&utm_unptid=df6a60e4-c7fd-11f1-b130-9f4f97ad5799&ppid=RT002668&cnac=NO&rsta=no_NO(nb-NO)&unptid=df6a60e4-c7fd-11f1-b130-9f4f97ad5799&calc=ed1b9748d767b&unp_tpcid=legal-tickler-notifications&page=main%3Aemail%3ART002668&pgrp=main%3Aemail&e=cl&mchn=em&s=ci&mail=sys&appVersion=1.448.0&tenant_name=PayPal&xt=186218182450186220175543104038184933184935180658&xe=115153114833115152114002101255114941115052114543&link_ref=article_why-am-i-receiving-emails-from-paypal-when-i-dont-have-an-account-faq4172

Page Load Overview

8.04s
Total Load Time
1.8 MB
Total Size

Language Analysis

Primary Language

🇳🇴Norwegian
Code: no
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:no
Text Length:3,397 chars
Detector Agreement:80%

Website Classification

Primary Category

news30% confidence
Type: spa
Method: structural

All Detected Categories

news
30%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
20104.18.7.168Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
613.226.244.115Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
6146.75.123.1Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
6173.0.92.23Cloudflare · CDNUnited States
AS13335Cloudflare, Inc.
650.19.89.137Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
6146.75.121.21Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
613.226.244.129Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
6104.17.208.24Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6104.17.207.24Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
654.235.101.7Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
14021--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T169641A9AA040DD3DE5030DACFCBFAF3EB18DD25886CDDC869C75CB7882A76B11591252

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:HOMVToOTC911TuGo5kAsAkLiZcHCXMoCKtfdAt3KUxjaDfglgCb:uC/wsf5kAwDik0klp

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:307900:VYhAOQeQBIzOMJT0ICBAUIeAoiCxJJAEUQPAASVAKWb1oQ4giLM4SEGGpBwnAAEGwgIgAMcJwKqQgkIMIYIajEEoiQnEBOAE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:f9ffffc3c7e7e783
Perceptual Hash:b8ca4bcb385a6aca
Difference Hash:7122261e1e0e4f1f
Wavelet Hash:98fade83c3c3c381
Color Hash:#931f7a

Other Hashes

Crop Resistant:7122261e1e0e4f1f

Scan History

Scan history not available

Unable to load historical scan data