corporate

English

ts_c

_dd_s

x-pp-s

LANG

l7_az

nsid

tsrce

enforce_policy

The domain name 'www.paypal.com' uses the commercial generic top-level domain (.com); it also runs on subdomain 'www'. The second-level label 'paypal' is 6 characters long with 2 vowels and four consonants. It segments into one word: paypal. Expect 6 characters per word on average. No strong language cues emerged from the frequency lists.

html/bf/fb/bffbce27-2b88-4dc6-8f0c-fcf87fe77df9_fallback.html.gz

PayPal

html/bf/fb/bffbce27-2b88-4dc6-8f0c-fcf87fe77df9.html.gz

default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; style-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; script-src 'nonce-aqAUMgcjMaZ/0k9JO0mwh8n1eIS0pjpcUp5Ad3RCh3TPMtH4' 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com; img-src 'self' https: data:; object-src 'none'; font-src 'self' https://*.paypal.com https://*.paypalobjects.com; frame-src 'self' https://*.paypalobjects.com https://*.paypal.com https://*.qualtrics.com; connect-src 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com https://api.sprig.com https://browser-intake-us5-datadoghq.com https://*.qualtrics.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp

default-src 'self' https://*.paypal.com https://*.paypalobjects.com; connect-src 'self' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; frame-src 'self' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; script-src 'nonce-S2bnuw+g+P62VNFf1CFPLsIfTeTI3L0W7EId9kcqBS3UaVXc' 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; style-src 'nonce-S2bnuw+g+P62VNFf1CFPLsIfTeTI3L0W7EId9kcqBS3UaVXc' 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; object-src 'none'; img-src https: data:; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp

form-action 'self' https://*.paypal.com https://*.cardinalcommerce.com; default-src 'self' https://*.paypal.com https://*.paypalobjects.com; connect-src 'self' https://*.paypal.com:* https://*.paypalobjects.com  https://*.braintreegateway.com https://*.braintree-api.com https://*.googleapis.com https://*.firebaseio.com wss://*.firebaseio.com https://api2.amplitude.com http://127.0.0.1:* https://*.qualtrics.com; frame-src 'self' https://*.paypal.com:* https://*.paypalobjects.com https://*.cardinalcommerce.com https://*.venmo.com https://*.braintreegateway.com https://*.firebaseapp.com https://*.qualtrics.com; script-src 'self' https://*.paypal.com:* https://*.paypalobjects.com  https://*.braintreegateway.com 'unsafe-inline' https://apis.google.com; style-src 'self' https://*.paypal.com:* https://*.paypalobjects.com 'unsafe-inline'; font-src 'self' https://*.paypal.com https://*.paypalobjects.com data:; object-src 'none'; img-src https: data:; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp

36f57266dcde1efd3b48177305652032edbd9a76d365d77a6cf241a0c975868e

af636b23d9d842ca354e0de3d4190329a4b2d844106d753933c7c6fcdf2fdd7c

3c114955caf55b96bc6fa674fe335e71f75ea6b43d23aba5e0d9622f65275c20

fd20594d74e3a47ab59f76b9b1652aa19adb1925334d284e683d7a89373cbafa

c9f636031611f06c11ffe6afc328c0669ffc41ae062054160b92d125f258d5ca

e7480e4d220cc2e94e826921be672c64dd39d57a6f4c676c45d106ba807aeb0e

81312639c171ecf1279d64c14edcbd0c1a75d2cb8cf3399b8cd2ab8e24b3fe5d

d903dd7c28ba18784b43cb78428e0496b7708cb4219ee16d5c6950a86142cc55

abbb206bde8651678b37ba6ad31e000cee1f68248de317188290a5ae13c66221

0858c0e9587eb7b46c92bbe03f0d1a6cf476343f033e6ee960673b28df15d393

56931f6a43eb0aaae9f9ba7d66e83b9c9d9568359fb3fb6963a435771a19481d

width=device-width, initial-scale=1.0, maximum-scale=2

viewport

apple-mobile-web-app-capable

apple-mobile-web-app-status-bar-style

format-detection

twitter:title

https://www.paypalobjects.com/ncp/icon/paypal-mark-color-300.png

twitter:card

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

MarkMonitor Inc.

PAYPAL.COM

if (PAYPAL && PAYPAL.analytics) {
            const options = {
              data: {
                tenant_name: "paypal",
                space_key: "SKS09G",
                cust: "",
                pgrp: "main:business:web:hostedcheckout",
                page: "main:business:web:hostedcheckout:payment",
                event_name: "page_view_payment",
                comp: "nocodenodeweb",
                pgtf: "Nodejs"
              }
            };
            PAYPAL.analytics.setup(options);
          }

✅ Low Risk - https://www.paypal.com/ncp/payment/QJA4NGNTZ8LR8

Requests	IP Address	Location	AS Autonomous System
9	172.64.153.163	Unknown	Unknown
4	146.75.121.21	Unknown	Unknown
4	34.149.66.154	Unknown	Unknown
4	104.18.34.93	Unknown	Unknown
4	184.72.105.205	Unknown	Unknown
4	104.18.6.168	Unknown	Unknown
4	34.198.52.31	Unknown	Unknown
4	146.75.123.1	Unknown	Unknown
4	50.19.89.137	Unknown	Unknown
4	172.64.152.85	Unknown	Unknown
61	14	-	-

Security Scan Report: www.paypal.com

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History